• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 948
  • Last Modified:

Power User

We are using Windows 2008 AD with Windows XP Workstations. Fo Lotus Notes functioning properly I have to add Domain users to the local Power Users Group. Every time I do that users name stay there only until next login. Ive tried to use Restricted Groups from GPO but there is no Power Users Group.

Please help.
1 Solution

Create a new Restricted Groups policy in a GPO object, and manually type 'Power Users' (without the quotes) for the name of the group. Then, in the properties, set 'Members' and specify the 'DOMAIN\Domain Users' group as the member.

Apply the Group Policy object to a container in which you have your Computer accounts, and this policy should apply successfully.

Before deploying such a policy to the enterprise, it is also per best practices to test your deployment with a smaller OU of test machines, prior to letting the policy loose for all computer objects in the domain.

NAdminDilimAuthor Commented:
Thank you, Matt.
I found another also odd way.
Ive downloaded GPO Editor SP1 and install it on Windows XP Client PC. When I open it, Power Users Group was there but only on childrens objects not on Domain Policy. I add Domain Users Group there. Strange thing is that when I open the same Policy Object from Server 2008 Console I found unnamed Group with *SID instead of the name. When I went to a client PC and open Power Users Group, Domain Users where there and they seams to stay there so far.
It looks like 2008 has something different that substitute Power Users on Win 2008/Vista AD.
Thank you for your help.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now