Windows 2000 Server - How to Create a User Group

[RogersSystems]

How do I create a user group and set do's and dont's to that group?

I would like to create a user group that allows AntiVirus and Windows updates but no installation of software. Any ideas?

Frankie

 

[bignick]

the only way I can think to do it is with active directory and group policy objects (gpo).

some sites that have more info-
labmice.net
windows2000faq.com

 

[Woodie]

I'm not sure that you'll be able to do that, but you can try:

Right-click My Computer, click Manage. Expand Local Users and Groups.
Create the Users you want to add.
This is also where you create groups. I would try making the privileged users members of the Power Users group, as that should allow them to do Windows Update and A/V update. Unfortunately, they'll also be able to install software.

Regular user can't do either. In fact, they can't even shut down Macaffee A/V.

Good Luck

 

[bazookaman1]

If he is using Win2000 Server then he is most likely using Active Directory. In this case using the above method with Local users and groups would be pointless. Because that would only affect the people physically logging into that machine under the specified names. It wouldn't affect them say if they were to log into another machine with that same name. Active Directory is the way to go, and using Group Policy is the way to do it.

 

[Woodie]

If he is using Win2000 Server then he is most likely using Active Directory

An assumption. I made the opposite assumption, that he doesn't have AD, so previous recommendations of GPOs wouldn't be available. I don't think there's a good solution w/o AD & GPOs.

 

[RogersSystems]

Yes, I am using active directories and also there is not a group called power users. I would like to either create a power users group or something similar. Any ideas?

 

[Woodie]

Power Users is a built-in, local group. You certainly could create a Domain Global group, put the users you want in it, then drag that Domain group into the the local Power Users group on each workstation.

Not necessarily elegant, but it'll do what you want. GPOs would be much more elegant, and do what you really want--you just have to learn aboout them.