Solved

Power User

Posted on 2009-04-13
2
922 Views
Last Modified: 2012-05-06
We are using Windows 2008 AD with Windows XP Workstations. Fo Lotus Notes functioning properly I have to add Domain users to the local Power Users Group. Every time I do that users name stay there only until next login. Ive tried to use Restricted Groups from GPO but there is no Power Users Group.

Please help.
0
Comment
Question by:NAdminDilim
2 Comments
 
LVL 58

Accepted Solution

by:
tigermatt earned 500 total points
ID: 24132534

Create a new Restricted Groups policy in a GPO object, and manually type 'Power Users' (without the quotes) for the name of the group. Then, in the properties, set 'Members' and specify the 'DOMAIN\Domain Users' group as the member.

Apply the Group Policy object to a container in which you have your Computer accounts, and this policy should apply successfully.

Before deploying such a policy to the enterprise, it is also per best practices to test your deployment with a smaller OU of test machines, prior to letting the policy loose for all computer objects in the domain.

-Matt
0
 

Author Closing Comment

by:NAdminDilim
ID: 31569649
Thank you, Matt.
I found another also odd way.
Ive downloaded GPO Editor SP1 and install it on Windows XP Client PC. When I open it, Power Users Group was there but only on childrens objects not on Domain Policy. I add Domain Users Group there. Strange thing is that when I open the same Policy Object from Server 2008 Console I found unnamed Group with *SID instead of the name. When I went to a client PC and open Power Users Group, Domain Users where there and they seams to stay there so far.
It looks like 2008 has something different that substitute Power Users on Win 2008/Vista AD.
Thank you for your help.
0

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Recently, I was asked to look into SCCM 2007 by my employer, having a degree of experience of earlier versions of SMS and some previous SCCM knowledge I didn't expect the procedure to involve to much time. I read a number of guides concerning it…
To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now