none
Establish "power User"-like rights for domain user account in Server 2008 R2 RRS feed

  • Question

  • We run an application that works fine EXCEPT for an administration portion of the app.

    The vendors says "you have to give your user Power User rights so they can read/write the registry".

    When I asked him how to do this in 2008, since Power User is deprecated, he said he couldn't assist me.

    I'm not a trained IT person, so I need pretty specific instruction...

    Monday, March 4, 2013 6:09 PM

Answers

  • Hello jjgurley,
    as you can read on TechNet Library Article Default local groups

    "Power Users

    By default, members of this group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones. For legacy applications that require the same Power User rights and permissions that were present in previous versions of Windows, administrators can apply a security template that enables the Power Users group to assume the same rights and permissions that were present in previous versions of Windows."

    ...That said you should use GPO (Group Policy Object) to configure security settings for your needs.

    Bye,
    Luca


    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Monday, March 4, 2013 8:46 PM
  • Power Users group was kept only for compatibility reasons like for the application you have.

    You can use compatws.inf template to enable this group. Details here: http://computingtech.blogspot.fr/2008/06/windows-server-2008-local-group-policy.html


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Monday, March 4, 2013 9:47 PM

All replies

  • Hello jjgurley,
    as you can read on TechNet Library Article Default local groups

    "Power Users

    By default, members of this group have no more user rights or permissions than a standard user account. The Power Users group in previous versions of Windows was designed to give users specific administrator rights and permissions to perform common system tasks. In this version of Windows, standard user accounts inherently have the ability to perform most common configuration tasks, such as changing time zones. For legacy applications that require the same Power User rights and permissions that were present in previous versions of Windows, administrators can apply a security template that enables the Power Users group to assume the same rights and permissions that were present in previous versions of Windows."

    ...That said you should use GPO (Group Policy Object) to configure security settings for your needs.

    Bye,
    Luca


    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees, and confers no rights.

    Monday, March 4, 2013 8:46 PM
  • Power Users group was kept only for compatibility reasons like for the application you have.

    You can use compatws.inf template to enable this group. Details here: http://computingtech.blogspot.fr/2008/06/windows-server-2008-local-group-policy.html


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    Monday, March 4, 2013 9:47 PM