List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] Power Users and Win 7

Prev Next

You are not authorized to post a reply.

Author

Messages

AFidel

Posts:88

09/01/2010 10:31 PM
During testing our desktop team has found that some functionality (changing desktop themes and some other random bits) are enabled if we place a test user in the local power users group but not with default user permissions. According to all the MS docs I can find Power Users has no additional rights but that is obviously not the case as we are seeing distinct and repeatable differences, there is no GPO filtering based on local group membership that I can find. Does anyone know definitively what rights Power Users actually have in Win7 and if there is any reason not to put Domain Users into the group? Thanks, Andrew

michael1

Posts:426

09/01/2010 10:39 PM
<http://blogs.technet.com/b/jesper_johansson/archive/2006/03/12/421870.aspx> Still applies to Win7. From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Fidel, Andrew Sent: Wednesday, September 01, 2010 5:31 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Power Users and Win 7 During testing our desktop team has found that some functionality (changing desktop themes and some other random bits) are enabled if we place a test user in the local power users group but not with default user permissions. According to all the MS docs I can find Power Users has no additional rights but that is obviously not the case as we are seeing distinct and repeatable differences, there is no GPO filtering based on local group membership that I can find. Does anyone know definitively what rights Power Users actually have in Win7 and if there is any reason not to put Domain Users into the group? Thanks, Andrew

darren

Posts:386

09/02/2010 1:04 AM
Actually that is not entirely the case as MS did make an explicit effort to "neuter" Power Users in Win7, but it doesn't have equivalent rights to regular users. I have yet to see the differences documented anywhere however. Darren From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Michael B. Smith Sent: Wednesday, September 01, 2010 2:39 PM To: activedir@mail.activedir.org Subject: RE: [ActiveDir] Power Users and Win 7 <http://blogs.technet.com/b/jesper_johansson/archive/2006/03/12/421870.aspx> Still applies to Win7. From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Fidel, Andrew Sent: Wednesday, September 01, 2010 5:31 PM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Power Users and Win 7 During testing our desktop team has found that some functionality (changing desktop themes and some other random bits) are enabled if we place a test user in the local power users group but not with default user permissions. According to all the MS docs I can find Power Users has no additional rights but that is obviously not the case as we are seeing distinct and repeatable differences, there is no GPO filtering based on local group membership that I can find. Does anyone know definitively what rights Power Users actually have in Win7 and if there is any reason not to put Domain Users into the group? Thanks, Andrew

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] Power Users and Win 7

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads