We need to figure out how to allow a group of domain users to have local
computer / workstation Power User Rights. So they can install/uninstall
applications.

We are starting use GPO, so we are not experts but familiar. I created a
Global Security Group called Power Users Group, added a user account, and
created a new GPO and called it Local Power Users and assigned the Power User
Group. Then I created a OU called Power Users and linked the GPO.

This did not work, please help.

And please ve descriptive so we can learn / test quickly. heee

Thanks,
--
Rick_Cass

Hi,

RickCass schrieb:
> We need to figure out how to allow a group of domain users to have local
> computer / workstation Power User Rights. So they can install/uninstall
> applications.

You know that Power Users are Administrators, who haven´t made themself
to Administrators yet? ;-)

- create a OU, move all computers you want to it
because you can´t apply a GPO to the container "Computers"
- create a new GPO an link it to the new OU
- Use the "restricted groups" inside the Security Polcies
- In the restricted groups create a new group
"your users security group" or however they called and where
all your wanted users are members in.
- in the settings of this resitricted groups use the "lower" box
and add "Power Users" to the field "Members of"

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.