adding a logged in user as a Power User

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

I was searching for a way to add any user who logs in as a Power User,
without having to do it PC by PC.

I found the below. So I created the .bat file with the required line in it.
I then went into the group policy and went to -
Computer Configuration > Windows Settings > Scripts > StartUp

I then added the .bat file which i had put at the root of C. I am doing
this on the domain controller server.

However when i restarted a PC and logged in - that user did not appear in
Power Users. Am I misssing something.

Should the .bat file be in a shared drive. Also how do i force an update to
the group policy so that all PCs are usin the policy with the changes i made.

Thanks


----------------------------------------------------


I would recommend to add "NT Authority\Interactive" in the local
"Power Users" group to let all domain users automatically be power
users when they log on to a computer interactively.


You can do this operation in a computer startup script (with a
GPO) that runs as part of the boot up process (before the user logs
in). It runs under the system context and has admin rights.


Adding it to the "Power Users" group with a command line in a bat file:


%SystemRoot%\system32\net.exe LOCALGROUP /ADD "Power Users"
"NT Authority\Interactive"
 
Hi,
Create a batch file with the following line:
net localgroup "Power Users" "domain\Domain Users" /add
where domain is the name of your domain.
This will add all domain users to the power users groups.

When you are in the startup scripts window you have a button at the bottom
"view files". If you click it the sysvol folder will open. Copy your batch
file in there.
Then click add at the startup scripts window and search. You should directly
be in the Sysvol folder where you copied the script before. Add the batch
file.

Give the domain some time to replicate or if you are in a hurry make a
manual replication. Sometimes it just takes its time though. So you might
need patience.

The commands to force the workstations to apply the updated GPOs are:
W2K: secedit /refreshpolicy machine_policy /enforce
WXP: gpupdate /force

But usually that shouldn't be necessary. The workstations update the GPOs in
regular intervals. Don't remember the time span though.

Just keep in mind that a user gets his group memberships at login. So
depending on how you set it up a relogin might be necessary.

BR
Marcus
 
Back
Top