Pushing Power Users

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Environment:
Windows 2003 Domain
All clients Windows XP Pro

Is there an easy way via group policy to push out an active directory
security group, ie) site power users, to each PCs local Power Users group?

Any help or suggestions much appreciated!!
Thx,
-Sean
 
Sean,

That smells suspiciously like a situation to make use of the 'Restricted
Groups' GPO. This is a very nice thing that MS has added. In my opinion,
it is better than a startup script using the net commands as when you make
use of the RG GPO one can not add any other user account object or group
object to that 'focus' group ( read: local Power Users group.... ).


However, please do yourself two small favors:

1) read up on this and make sure that you understand the default behavior,
and
2) do this from a WINXP Pro system using either the GPMC or the ADUC MMC.

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)
 
Back
Top