Adding Domain Users group to local Power Users

J

JohnB

Is there a way via a GPO, or any other method, to automate adding the Domain
Users group to the local Power Users group?
Thanks
 
O

Oli Restorick [MVP]

Sure

You have two choices. First first is to use the "restricted groups" feature
of Group Policy. Bear in mind that, depending on Windows version and hotfix
levels, it will either merge or replace the existing membership of the local
group.

My preferred method is to use a computer startup script to run the following
command:

net localgroup "power users" "mydomain\domain users" /add

If you enter the "net" as the command and the rest as the parameters, this
will save mucking around with a batch file.

This method will not be removed when it falls out of scope of the GPO, but
I'm guessing you don't care about that.

Another (better) alternative is to use the following:

net localgroup "power users" interactive /add

This will mean that all users logging in at the console will be power users,
but users connecting across the network will not be.

Finally, I don't generally recommend making users members of power users or
administrators. For some environments it may be necessary, but to me it's a
last resort. Better to understand your applications and loosen up file and
registry permissions as necessary (group policy can help here as well).

Hope this helps

Oli
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top