Sure
You have two choices. First first is to use the "restricted groups" feature
of Group Policy. Bear in mind that, depending on Windows version and hotfix
levels, it will either merge or replace the existing membership of the local
group.
My preferred method is to use a computer startup script to run the following
command:
net localgroup "power users" "mydomain\domain users" /add
If you enter the "net" as the command and the rest as the parameters, this
will save mucking around with a batch file.
This method will not be removed when it falls out of scope of the GPO, but
I'm guessing you don't care about that.
Another (better) alternative is to use the following:
net localgroup "power users" interactive /add
This will mean that all users logging in at the console will be power users,
but users connecting across the network will not be.
Finally, I don't generally recommend making users members of power users or
administrators. For some environments it may be necessary, but to me it's a
last resort. Better to understand your applications and loosen up file and
registry permissions as necessary (group policy can help here as well).
Hope this helps
Oli
"JohnB" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Is there a way via a GPO, or any other method, to automate adding the
> Domain Users group to the local Power Users group?
> Thanks
>
|
Similar Threads
