How to configure a Power User Group in AD? 1

[drunkmestupid]

Hi folks,

When I had Win2K Pro on a stand alone machine I had several user profiles setup. On the local machine you have 2 main levels of access: Standard (Power Users Group) and Restricted (Users Group).

The way the users profiles through AD act is as if they are Restricted. In other words, the 'Domain Users Group' seems to equal that of the local 'Users Group' as far as restrictions go.

I need to be able to achieve creating a group through AD that is more like the local 'Power Users' Group.

I say this because it seems as if the local machine has 3 main levels: User, Power User, and Administrator, yet AD seems to only have 2, User and Administrator with no middle ground.

Does this make sense?

Please help!


Thanks.

 

[GrnEyedLdy]

DrunkMeStupid,

Since Power Users don't exist in Server, you will need to create a 'group', populate it with those users who need 'extra' rights and then configure the rights for this group via a GPO.

Does this make sense?

Patty

 

[drunkmestupid]

Hi Patty,

Thanks for the reply. jamk555 hit the same thing in another (similar) thread I had. Here's what he/she said:

"In other words:
1. create a security group on the domain level that is your 'super user' group
2. assign group policy to this that gives them all of the permissions on the local machines that you want them to have.
3. enforce this group policy to the users you want to apply it to
4. Add the users that you want to have those permissions to that 'super user' group

remember, domain policy takes precedence."


You both are along the same path I want to go here, however, what both of you have said is the limit to what I know how to do.

I am familiar with creating a security group and assigning those users to it that I want to have those permissions, however, once the group is created I don't know where to find all the "options" (per se) to allow and disallow.

I am not in front of my setup right now, but if I remember right, once I created the group and opened its properties, I couldn't find anywhere to configure/customize the permissions for that group.

I hope this makes sense.


Thanks.