Yep...Absoultely right you don't have to browse, and you can't choose from
there. Sorry for the confusion.
What I have seen people do by mistake though, is to add Domain Users to the
Domain group "Remote Desktop Users" instead of the local group, by not
paying attention.
It's a powerful piece of GPO's, either way you use it.
Power Users doesn't exist on DC's though. So, it would have been safe.
John
"Darren Mar-Elia"
<[EMAIL PROTECTED]
m> To
Sent by: <[email protected]>
[EMAIL PROTECTED] cc
ail.activedir.org
Subject
RE: [ActiveDir] GPO
05/10/2006 11:05
AM
Please respond to
[EMAIL PROTECTED]
tivedir.org
Christine-
Just try typing the group name free-hand in the dialog. You don't have to
browse to it for this work.
Darren
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Christine Allen
Sent: Wednesday, May 10, 2006 8:53 AM
To: [email protected]
Subject: RE: [ActiveDir] GPO
Hi,
Is there a special security template I need to add because I can pick any
local groups like power users.
-Christine
Christine N. Allen
Systems Engineer
BMC HealthNet Plan
2 Copley Place
Boston, MA 02116
617-748-6034
617-293-4407
[EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, May 10, 2006 10:58 AM
To: [email protected]
Subject: RE: [ActiveDir] GPO
Hi Jef...
I'm sure it works with 2003 also, was really a bug in XP that they had to
fix, that the additive part just plain didn't work.
I believe, but can't promise that 2000 SP4 works too.
John
"Jef Kazimer"
<[EMAIL PROTECTED]>
Sent by:
To
[EMAIL PROTECTED] <[email protected]>
ail.activedir.org
cc
Subject
05/10/2006 09:52 RE: [ActiveDir] GPO
AM
Please respond to
[EMAIL PROTECTED]
tivedir.org
John,
Just curious, was these option *ONLY* availiable in XP SP2? Any hope
it
exists in Windows Server 2003 SP1? :)
Thanks,
Jef
> From: [EMAIL PROTECTED]
> Subject: RE: [ActiveDir] GPO
> To: [email protected]
> Date: Wed, 10 May 2006 08:49:21 -0500
>
> Hi Peter...
>
> If the clients are SP2, you can use the bottom box, to use it
additively.
> They finally fixed it.
>
> You use the bottom box, kinda backwards relative to the top...So, you
would
> say for the group Domain Users, then that it is always a member of the
> local power users group. You can even just browse to that, if you
> just pick the local machine as the location.
>
> Hope this helps,
> John
>
>
>
>
>
>
> "Peter Johnson"
> <[EMAIL PROTECTED]>
> Sent by:
To
> [EMAIL PROTECTED] <[email protected]>
> ail.activedir.org
cc
>
>
Subject
> 05/10/2006 08:39 RE: [ActiveDir] GPO
> AM
>
>
> Please respond to
> [EMAIL PROTECTED]
> tivedir.org
>
>
>
>
>
>
> Hi John
>
> Is there some way to define additive versus replacement as the last
> time I tried this it did a hard replacement.
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> [EMAIL PROTECTED]
> Sent: 10 May 2006 14:57
> To: [email protected]
> Subject: Re: [ActiveDir] GPO
>
> Hi Christine..
>
> You can use the restricted groups function to add say domain users to
> the power users group on the local machine. It's a little tricky as
> one function of it will replace any other members of the power users
> group, should there be any. As of XPSP2 though, you can do it
> additive, instead of replacing.
>
> Hope this helps...
>
> John
>
>
>
>
>
>
> "Christine Allen"
>
> <Christine.Allen@
>
> bmchp.org>
> To
> Sent by: "[email protected]"
>
> [EMAIL PROTECTED]
<'[email protected]'>
>
> ail.activedir.org
> cc
>
>
>
> Subject
> 05/10/2006 07:46 [ActiveDir] GPO
>
> AM
>
>
>
>
>
> Please respond to
>
> [EMAIL PROTECTED]
>
> tivedir.org
>
>
>
>
>
>
>
>
>
> Hello,
>
>
> Is there a way to change local computer rights via a gpo. We would
> like to add our users to the Power users group to distribute software,
> then take about that right after the software has been deployed.
>
>
> -Christine
>
>
> Christine N. Allen
> Systems Engineer
> BMC HealthNet Plan
> 2 Copley Place
> Boston, MA 02116
> 617-748-6034
> 617-293-4407
>
>
> [EMAIL PROTECTED]
>
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
>
>
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive:
> http://www.mail-archive.com/activedir%40mail.activedir.org/
Join the next generation of Hotmail and you could win the adventure of a
lifetime Learn More.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
