Hi Peter...

If the clients are SP2, you can use the bottom box, to use it additively.
They finally fixed it.

You use the bottom box, kinda backwards relative to the top...So, you would
say for the group Domain Users, then that it is always a member of the
local power users group.  You can even just browse to that, if you just
pick the local machine as the location.

Hope this helps,
John





                                                                           
             "Peter Johnson"                                               
             <[EMAIL PROTECTED]>                                             
             Sent by:                                                   To 
             [EMAIL PROTECTED]         <[email protected]>      
             ail.activedir.org                                          cc 
                                                                           
                                                                   Subject 
             05/10/2006 08:39          RE: [ActiveDir] GPO                 
             AM                                                            
                                                                           
                                                                           
             Please respond to                                             
             [EMAIL PROTECTED]                                             
                tivedir.org                                                
                                                                           
                                                                           




Hi John

Is there some way to define additive versus replacement as the last time
I tried this it did a hard replacement.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: 10 May 2006 14:57
To: [email protected]
Subject: Re: [ActiveDir] GPO

Hi Christine..

You can use the restricted groups function to add say domain users to
the
power users group on the local machine.  It's a little tricky as one
function of it will replace any other members of  the power users group,
should there be any.  As of XPSP2 though, you can do it additive,
instead
of replacing.

Hope this helps...

John






             "Christine Allen"

             <Christine.Allen@

             bmchp.org>
To
             Sent by:                  "[email protected]"

             [EMAIL PROTECTED]         <'[email protected]'>

             ail.activedir.org
cc



Subject
             05/10/2006 07:46          [ActiveDir] GPO

             AM





             Please respond to

             [EMAIL PROTECTED]

                tivedir.org









Hello,


Is there a way to change local computer rights via a gpo.  We would like
to
add our users to the Power users group to distribute software, then take
about that right after the software has been deployed.


-Christine


Christine N. Allen
Systems Engineer
BMC HealthNet Plan
2 Copley Place
Boston, MA 02116
617-748-6034
617-293-4407


[EMAIL PROTECTED]



List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to