Alternatively, if you use a batch file for a login script, you can just add something like:

net localgroup "Power Users" /add "domain\ADGroup"
or
net localgroup "administrators" /add "domain\%Username%"

----- Original Message ----- From: "Tomasz Onyszko" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, February 08, 2005 6:22 AM
Subject: Re: [ActiveDir] users with power user rights



Saleem, Mohamed Yunus wrote:
Hi everyone

(..)


Is it possible to do such policy. Or is there any other way. Please help.

Put this users into some security grou, then configure Restricted groups in policy object which affects this workstations:
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
http://www.jsiinc.com/SUBG/TIP3200/rh3251.htm
http://www.microsoft.com/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/standard/proddocs/en-us/611.asp



-- Tomasz Onyszko [MVP] [EMAIL PROTECTED] http://www.w2k.pl

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to