• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 159
  • Last Modified:

I cant find power user in my AD, SBS 2000

Hi where do i find Power users in my AD cant find it anywhere and need it to let soem users use SAGE.

sorry for the dumb question

1 Solution
Power User does not exist in Active Directory.  It only on the Local Computers
Yes, 2hype is correct....power users don't exist in Active Directory.

Do you want to make the user a "power user" for the server itself (so they can logon directly to the server) or do you want them to be a power user on their computer?

A power user is a local user group and since a domain controller doesn't have a local user list then you can't make a user a power user for a domain controller.

If you just want to make the user a power user on his/her computer then you just need to had their domain account into the power users group on their local computer. Do this like you would add any local user to the power users group.....just use their domain account instead.
You can create a custom security template and deploy it with Group Policy..  This will allow you to relax some of your security, without giving your users all the rights of the Power Users Group..


Once you create your template, import it into Group Policy and assign it.

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

pbraneAuthor Commented:
im struggling to understand sorry, i want a user to be able to log onto any machine on the network and have power user rights does this mean i have to go around all the machines and add it? that means hundreds of changes.

how do i do it so AD will make the user a power user when they log on.

As said before, you cannot add a user to the PowUsers group using Group Policy, or AD.  But you can create a custom security policy and deploy it using Group Policy.  First you need to identify what exactly the users need, then create the template (above), then use Group Policy to deploy the Template to your specific users.  This is the only way I know of to do this.  And with 100's of systems, it is by far the best way to get the job done!

So, first ck out the Security Configuration Tool using an MMC:

Start > Run > mmc (OK)
Add the appropriate Snap-ins (Security and Configuration Analysis AND the Security Templates snap-ins)
Load the Template that best fits your users to the Database
Tweak the Database Template to your liking
Save the Template
Import it into Group Policy
Configure Group Policy to the specific OU where your 'power users' are in

Remember that Group Policy can only be applied to Users, and NOT Groups.  So be sure to place all your 'power users' in one OU and assign the appropriate permissions for the Group Policy (Read and Apply)

Now, when your users in that OU log into their systems anywhere, they will get the appropriate policy with the correct permissions to do what they need to do.

Very good, and thanks!

pbraneAuthor Commented:
no problem

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now