[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now

x
?
Solved

Adding groups to Power Users group on servers

Posted on 2008-06-16
3
Medium Priority
?
309 Views
Last Modified: 2010-03-17
Hi

I would like to add a couple of Domain Security Groups to the Power Users group on a selected group of servers.

I understand I can use the Restricted Groups functionality of Group Policy to do this, however I when trying to add the Power Users group as a Restricted Group, I am unable to do so - any ideas?

Thx- urgent so max points
0
Comment
Question by:kam_uk
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 70

Accepted Solution

by:
KCTS earned 1500 total points
ID: 21798565
First put the users that you want to give local admin rights to into a security group

Create and OU that contains the computers that you want them to have rights on and put the computers into the OU. Note that this cannot be the Computers Container.

Create a group policy that configures the security group as a Restricted Group, and under the "This group is a member of...", option add "Power  users"

Link the GPO to the OU that contains the computers

Run gpupate/force to update the policy

See http://support.microsoft.com/kb/810076

   
0
 
LVL 3

Author Comment

by:kam_uk
ID: 21798668
Thanks

I have created a domain security group and configured this as a Restricted Group, however I cannot add Power Users under the 'this group is a member of'? There are only Groups to add, not built-in groups?
0
 
LVL 3

Author Comment

by:kam_uk
ID: 21798732
In fact, I can't seem to add this domain group to any of the local groups (administrators, remote desktop users, power users etc).

Any ideas?
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Auditing domain password hashes is a commonly overlooked but critical requirement to ensuring secure passwords practices are followed. Methods exist to extract hashes directly for a live domain however this article describes a process to extract u…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question