I just intalled a new SBS 2003 server and I set everyone up with a standard user account and myself as a domain admin. I quickly realized I wanted to give everyone Power user status on their own machines, other wise I will have to install everything myself. What is the fastest way to grant everyone power user status on their LOCAL machine? Other than going around and adding each user to the local Power users group. THanks
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Group Policy to change local permissions
- Thread starter Prizmm
- Start date
How many desktops?
Easiest way Right click my computer - manage
COmp Mgt - Connect to other Computer
PC-ABCDEF - L U & G - Groups and add Authenticated users to the Power Users group.
Repeat for each PC
Now any authenticated user will be a power, or create a new group in advance on the server called say PUsers_Local then add the people who need PU rights.
Iain
SOmething like dameware will reduce this time phenominally.
Easiest way Right click my computer - manage
COmp Mgt - Connect to other Computer
PC-ABCDEF - L U & G - Groups and add Authenticated users to the Power Users group.
Repeat for each PC
Now any authenticated user will be a power, or create a new group in advance on the server called say PUsers_Local then add the people who need PU rights.
Iain
SOmething like dameware will reduce this time phenominally.
If you used the to join the PCs to the domain and migrated local profiles, then the users already have local rights.
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
I hope you find this post helpful.
Regards,
Mark
Check out my scripting solutions at
terrywilson
MIS
Here is what I would do to accomplish this.
1. In Active Directory create a new OU, call it workstations (or whatever makes sense to you)
2. Move all of the computer accounts that you would like to make this change to from the Computers container into the Workstations container
3. Create a new Group Policy Object and link it to your new Workstations OU
4. Edit the Group Policy Object, you want to expand Computer Configuration, Windows Settings, Security Settings, Restricted Groups
5. Right Click Restricted Groups, choose Add Group
6. In the dialog, enter Power Users and Click OK
7. Click the Add button for Members of this group, add Authenticated Users
This will give any user that has been authenticated by something membership to the Power Users group (Well it should)
Let me know if you need any more help.
1. In Active Directory create a new OU, call it workstations (or whatever makes sense to you)
2. Move all of the computer accounts that you would like to make this change to from the Computers container into the Workstations container
3. Create a new Group Policy Object and link it to your new Workstations OU
4. Edit the Group Policy Object, you want to expand Computer Configuration, Windows Settings, Security Settings, Restricted Groups
5. Right Click Restricted Groups, choose Add Group
6. In the dialog, enter Power Users and Click OK
7. Click the Add button for Members of this group, add Authenticated Users
This will give any user that has been authenticated by something membership to the Power Users group (Well it should)
Let me know if you need any more help.
- Status
Similar threads
- Locked
- Question