james pang newsmicrosoftcom

--
Tech Servant James Pang.

jerold schulman

See tip 3251 » Group Policy Restricted groups.
in the 'Tips & Tricks' at http://www.jsifaq.com

Use http://support.microsoft.com?kbid=320065 as an example.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com

mark heitbrink mvp

Use the "restricted groups" in the machine gpo and add
the power users group manually, because they can´t be found
via browsing on a DC.

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: http://www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.

jamesjohnson

How exactly do you add the local power user account?

I have domainname\group in the top windows, group containing all the users
needing power user rights,

I have typed in "power users" in the bottom window. Have i input that
correctly, or should it be "local\power users" or something along those lines
as it doesnt seem to work.

James

mark heitbrink mvp

Hi,

james.johnson schrieb:


You can do 2 things.
a) replace all existing power users with the one you define,
That doesnt take big side effect, because usually there are
no users inside this group

b) add users to the existing group.
Thats the better way, e.g. you want to add local administrators ...

a)
- Add a new security group to the restricted group.
- you can choose your domain group you want
- "This gruop is Member of": Power Users

b)
- add a new security group
- name it manually Power Users
- "Members of this group": Your domain users group you want

HTH
Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: http://www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.