use restricted groups and make "INTERACTIVE" group member of "power users"
that will give you desired effect.

Only *Interactively* logged on user will be power user on that particular computer.

Caveat: make sure you exclude domain controller from this policy. :-)

--
Kamlesh
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Be the change you want to see in the World"
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
On 3/1/06, Irwan Hadi <[EMAIL PROTECTED]> wrote:
Is there a way to make so that whenever a user logon to a computer,
s/he will automatically be a member of that particular computer power
users (or even administrators) but nobody else?
The reason for this is because we have some specific applications
which users will need to install in their own computer, and are not
yet pushed thru group policy.

I've looked at restricted group GPO, but it seems with RG GPO, either
I will need to create individual GPO for each user, or I will need to
create a group of users and put this group as power users, which then
means everybody will have power users access to each other computer in
an organizational unit.

Thanks
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/



--

Reply via email to