Restricted Groups. Adding user to Power User

[Paul Banco]

Using Restricted Groups how can I add a user into the Power Users group on
the local workstations. Microsoft's explanation is a little confusing.
Anyone have a link or a quick way that I can do this for all my machines on
the domain.

thanks in a advance

 

[Tom Ausburne]

Run the group policy snap-in and choose the Default Domain Policy.
Go to Computer Configuration \Windows Settings\Security
Settings\Restricted Groups

Right Click and Choose to add a group - then type in Power Users.

Next add in the users or groups you want added to power users and add
them to the " Members of this group "


Once you close the snap-in and open it back up you will see that it
no longer displays the name Power Users but instead shows the SID
S-1-5-32.547. This is not a problem and can not be changed it is the
SID for the Power Users Group.


This process has two draw backs - When looking at the Restricted
Groups the Power Users show up as a SID and you will log Event 1000
with a source of userenv and a 1202 event with a source of SceCli in
your event log on the DC every time group policy is applied.

Also be aware that this will remove any current members of the group
and replace them with the users you have specified in the policy.

Tom Ausburne (MSFT)
Windows 2000 Directory Services
This posting is provided "AS IS" with no warranties, and confers no
rights.