Solved

Power User

Posted on 2009-04-13
2
929 Views
Last Modified: 2012-05-06
We are using Windows 2008 AD with Windows XP Workstations. Fo Lotus Notes functioning properly I have to add Domain users to the local Power Users Group. Every time I do that users name stay there only until next login. Ive tried to use Restricted Groups from GPO but there is no Power Users Group.

Please help.
0
Comment
Question by:NAdminDilim
2 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24132534

Create a new Restricted Groups policy in a GPO object, and manually type 'Power Users' (without the quotes) for the name of the group. Then, in the properties, set 'Members' and specify the 'DOMAIN\Domain Users' group as the member.

Apply the Group Policy object to a container in which you have your Computer accounts, and this policy should apply successfully.

Before deploying such a policy to the enterprise, it is also per best practices to test your deployment with a smaller OU of test machines, prior to letting the policy loose for all computer objects in the domain.

-Matt
0
 

Author Closing Comment

by:NAdminDilim
ID: 31569649
Thank you, Matt.
I found another also odd way.
Ive downloaded GPO Editor SP1 and install it on Windows XP Client PC. When I open it, Power Users Group was there but only on childrens objects not on Domain Policy. I add Domain Users Group there. Strange thing is that when I open the same Policy Object from Server 2008 Console I found unnamed Group with *SID instead of the name. When I went to a client PC and open Power Users Group, Domain Users where there and they seams to stay there so far.
It looks like 2008 has something different that substitute Power Users on Win 2008/Vista AD.
Thank you for your help.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question