Question Locked

Creating power users in Active Directory

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have seen this question posted numerous times on numerous boards, but still no real answer. There are suggestions for how to this or that, but no real answer.

Does anyone have a straight answer to the question?

What do I have to do to an AD user account to give that user Local Machine "poweruser" privilege permission, no matter what machine they log in on. I have numberous users with moderate attrition that must have power user permission to run applications on computers. They move from site to site, using different computers at each site. I am a one man show and going to each site to build each new/leaving user into and out of each machine is stagering to think about.

6 replies

by ic-it

You could establish a Group with those folks as members and then use restricted groups to add this group to the systems in question. One note of caution I believe it removes any local "power users" from that group. Here is an example.

http://mcpmag.com/columns/article.asp?EditorialsID=745

If you wish to keep any present power users you might wish to use a startup script to run a bat (or cmd etc) that has this line.
net localgroup "Power Users" Newgroup /add

by dhruv.tech

well,,, concept of power users is maily focuses to local computers. If you want to implement power users rights to AD users perhaps only way left is by running a log on script from group policies.
i hope that will work.

net localgroup "power users" "group" /add

i am not sure of the command.. please check it..

by ic-it

thought of that 2.5 years ago ... oh wait I just may have. :-) ;-)

by gblanchard

If you have to create them or move them into a given OU to allow this to function at each site, can't you place them high enough in the tree that it covers all OU's just like Domain Admin does? or did I misunderstand?

This discussion is closed to new replies.