How do I rectreate the Group "Power Users"?

[dumbdedo]

First of all, this is a crummy situation I'm in. We migrated our Servers from NT4 to Win2K, but the Group "Power Users" was never there before Migration and is still missing today (I believe the previous Administrator deleted it, Why? Dont ask me). I have tried recreating one from scratch, but to no avail. Does anyone know how to restore this Group to its default permissions? Or at least the differences between Administrators and Power Users so I can make it myself?

I appreciate any help you can give...

 

[butchrecon]

I am not sure if this wil lwork for you but it may be worth a shot. Use the net localgroup command at the cmd prompt. So to recreate the power users (If it can be recreated at all) try this command:

net localgroup users "nt authority\power users" /add


You may have to give the associated rights to the group as well. As I stated this may not work> I was unaware you could remove built in groups. James Collins
Field Service Engineer
A+, MCP

email: butchrecon@skyenet.net

Please let us (Tek-tips members) know if the solutions we provide are helpful to you. Not only do they help you but they may help others.

 

[TheGoodRev]

'Power Users' only exists on Workgroups, if youre operating a Domain, there is no Power Users Group.

Also, unless there is a funky way I dont know of, you cant delete the built-in group/user accounts. It would be a frightening thought if you could.

 

[tomavery]

This is a follow on to this question. We are forced to use the server operator group to get anyone to be able to ftp in. Is there any way around this? I dont like making people server operators at all.
Go Canucks! (rabid Vancouver Canucks Fan)

 

[Catadmin]

Don't know about the FTP thing, but the difference between Administrators and Power Users is this:

Forest Admin can do everything and anything on every server, domain admin can do so to their domain, etc. Full Control, basically. They can mess with EVERYTHING. (Bwhahahahaha. POWER TRIP!!) @=)


Power Users do not have Full Control over everything. They can create users and groups in whatever local group they have those privledges in, but can only manage what they create (not what someone else created) and can only manage those network shares and printers they create.

IE: If Bob the Power User creates Network Share 1, Printer 2 and Group ABC, then Anne the Power User cannot mess with them without Bob's login info, which is a a major security risk. On the other hand, Terry the Admin guy can mess with both Bob's and Anne's stuff because he has control over everything in that domain (presumably).

That's the way I understand it, anyway. From the information I have, TheGoodRev is correct. Power Users is a default group on local environments (check your member servers), not domains.

You can use the MMC snap-in Local Users and Groups on your member server to manage the Power Users OU.

Hope that helps. @=)

Catadmin - New to Server Admin, but willing to learn... All help is appreciated.