Allow Domain Users to have Local Computer Power User Rights

[Guest]

We need to figure out how to allow a group of domain users to have local
computer / workstation Power User Rights. So they can install/uninstall
applications.

We are starting use GPO, so we are not experts but familiar. I created a
Global Security Group called Power Users Group, added a user account, and
created a new GPO and called it Local Power Users and assigned the Power User
Group. Then I created a OU called Power Users and linked the GPO.

This did not work, please help.

And please ve descriptive so we can learn / test quickly. heee

Thanks,

 

[Mark Heitbrink [MVP]]

Hi,

We need to figure out how to allow a group of domain users to have local
computer / workstation Power User Rights. So they can install/uninstall
applications.

You know that Power Users are Administrators, who haven´t made themself
to Administrators yet? ;-)

- create a OU, move all computers you want to it
because you can´t apply a GPO to the container "Computers"
- create a new GPO an link it to the new OU
- Use the "restricted groups" inside the Security Polcies
- In the restricted groups create a new group
"your users security group" or however they called and where
all your wanted users are members in.
- in the settings of this resitricted groups use the "lower" box
and add "Power Users" to the field "Members of"

Mark