Power user group

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi All,
I need to make members of a domain security group have power user rights on
Windows XP Pro domain computers. The only way I can see to so this is to add
the Domain group to the local power users group on every PC. As I have to do
this on some 160 PC, anyone got any quicker solutions. The network is a
Windows 2003 domain.

Thanks All
 
By default, the Domain Admins group is auto added to the local Administrators
group of a Win machine (NT / 200x / XP) joined to a domain.

One way via your network login script:

net localgroup "power users" /add domain_name\domain_group

Alternatively, you can use "Restricted Group" in Group Policy to achieve the
same
goal. This also gives an added security benefit where the group membership is
constantly and automatically enforced.
 
David said:
Hi All,
I need to make members of a domain security group have power user rights on
Windows XP Pro domain computers. The only way I can see to so this is to add
the Domain group to the local power users group on every PC. As I have to do
this on some 160 PC, anyone got any quicker solutions. The network is a
Windows 2003 domain.
Click to expand...
Hi

Two options for you:

A)
You could do it in a computer startup script (with a GPO) that runs
as part of the boot up process (before the user logs in). It runs
under the system context and has admin rights.


B)
Restricted Groups enforced with Group Policy is maybe an option:

http://groups.google.com/[email protected]

and

How to Configure a Global Group to Be a Member of the Administrators Group on
all Workstations
http://support.microsoft.com/default.aspx?scid=kb;en-us;320065
 
Thanks Torgeir & Desmond

I think the answer is in the article 'How to configure a global group to be
a member of the administrators group on all workstations. I will apply a new
GPO to the exsisting AD structure, modifying the instructions to allow the
global group member ship of the Power user local group.

All this would be needed if a software package I am upgrading installed with
elevated rights.

Many Thanks

David
 
Back
Top