Power User

We got a SBS 2003 server with 5 user with regular user permissions. Two guys
(the owners of the company) want to be able to install applications to their
workstations. I´ve tested to put their users in the domain power user group
but they still cant install. Not until I put them in the domain administrator
group.
I´ve read someting about local power user, but i don´t know how to do that.

\\Wicke

Costas
Thu Jul 10 06:24:07 PDT 2008

The user groups you are looking for, are local on the computers.

They aren't domain groups. Go to the individual computers, right click on
'My Computer', select 'Manage', then click on 'Local Users and Groups' and
then 'Groups'. To the right you'll see the 'Power Users' group. Add the
domain user accounts to that user group.

Hope that helps

--
Costas
http://costas.cpstechgroup.com



"Wicke" <Wicke@discussions.microsoft.com> wrote in message
news:2F7F31BB-7DB4-41B1-AF9D-FF825160638A@microsoft.com...
> We got a SBS 2003 server with 5 user with regular user permissions. Two
> guys
> (the owners of the company) want to be able to install applications to
> their
> workstations. I´ve tested to put their users in the domain power user
> group
> but they still cant install. Not until I put them in the domain
> administrator
> group.
> I´ve read someting about local power user, but i don´t know how to do
> that.
>
> \\Wicke

Merv
Thu Jul 10 06:37:29 PDT 2008

You want to do this at the workstation level, not the SBS server. You may
want to try adding the domain user to the local Power User group on his
workstation. However, many program require "local administror" permissions
in order to install (and sometimes to run properly). If that's the case,
you will need to add the domain user to the "local administror" group on the
workstation. Of course, running as a local admninistrator does have a
higher security risk since malware can gain access to more pasrts of Windows
if a user is logged on as a local administrator.

Log onto the workstation as a domain admin or with an account that already
has local administrator permissions.

(right click) My Computer | Manage | Local Users and Groups | Groups |
(double click) Administrators | Add | Advanced | Find Now | (select the
target domain user account) | OK | OK | OK

Log off, then log on again as the target domain user

--
Merv Porter [SBS-MVP]
============================

"Wicke" <Wicke@discussions.microsoft.com> wrote in message
news:2F7F31BB-7DB4-41B1-AF9D-FF825160638A@microsoft.com...
> We got a SBS 2003 server with 5 user with regular user permissions. Two
> guys
> (the owners of the company) want to be able to install applications to
> their
> workstations. I´ve tested to put their users in the domain power user
> group
> but they still cant install. Not until I put them in the domain
> administrator
> group.
> I´ve read someting about local power user, but i don´t know how to do
> that.
>
> \\Wicke

Wicke
Thu Jul 10 06:53:02 PDT 2008


is it possible in some way to create a new group on the SBS and add the tow
guys to this group. And then log on to all the companys workstation and put
the new group to the local power user group?

stephen
Thu Jul 10 07:02:54 PDT 2008

Wicke wrote:
> is it possible in some way to create a new group on the SBS and add the tow
> guys to this group. And then log on to all the companys workstation and put
> the new group to the local power user group?

Yes, create the group on the server, add the members you require. You
can then add this group to each client computers' local administrators
group from the SBS management console by selecting the client computer
and using the 'manage' option.

--
stephen

SuperGumby
Thu Jul 10 07:08:19 PDT 2008

you can actually do that solely from SBS.

Logon to SBS as 'Domain Admin'.
Create a security group 'super duper users' and add your two users to it.
rt-clk 'My Computer' on the SBS, manage.
From the Computer Management screen, Action, 'Connect to another computer',
browse or type the name of the workstation.
drill down to 'System Tools', 'Local Users and Groups', Groups,
Administrators, and add your domain security group to the list of 'local'
Administrators for each PC.

Worries me though that this is necessary. The CEO of the company is probably
not a computer nerd but is also likely to want 'local admin' on his PC. Not
the best way to handle it. We really should be using Group Policy to get
around _only_ those areas of LUA (Limited User Access, I think) that require
it.

OTOH, if the PC's had been added using the correct procedure
(http://sbs/connectcomputer) we would have selected your two guys as users
for the PC during this process, which would have made them Local Admin
anyway.


"Wicke" <Wicke@discussions.microsoft.com> wrote in message
news:0CD2539E-AFD2-4CEE-B392-D7FF19954BD7@microsoft.com...
>
> is it possible in some way to create a new group on the SBS and add the
> tow
> guys to this group. And then log on to all the companys workstation and
> put
> the new group to the local power user group?

Wicke
Fri Jul 11 02:40:06 PDT 2008


Thanx for your help. I´ll try add my new "power group" to the local
priviliged user group.