JayWalsh said:
No, that doesn't work. (It does work in 2000 Pro, but not XP Pro.)
Even if you add a group called Power Users and add a User to the group, the system still doesn't recognize that user's status. The user still can't change the date/time, install a program, etc. etc. Control panel--->Users will list the user as an "unidentified" type. And the user will not actually have any of the PowerUser priviledges, just the Restricted User abilities.
Sorry, but it does indeed work. I'm replying to you from a Power User account (which shows up as "Unknown account type" in Control Panel > Users. I can change the time, I can install many applications, I can do all the things that a Power User can do.
One doesn't add a group called Power Users. The Power Users Group is built-in, with all the permissions, etc. pre-configured.
From the Help files:
Groups overview
Groups displays all built-in groups as well as groups you create. The built-in groups are created automatically when you install Windows 2000 or Windows XP. Belonging to a group gives a user rights and abilities to perform various tasks on the computer.
Administrators
Members of the Administrators group have the largest amount of default permissions and the ability to change their own permissions.
Backup Operators
Members of the Backup Operators group can back up and restore files on the computer, regardless of any permissions that protect those files. They can also log on to and shut down the computer, but they cannot change security settings.
Power Users
Members of the Power Users group can create user accounts, but can modify and delete only those accounts they create. They can create local groups and remove users from local groups they have created. They can also remove users from the Power Users, Users, and Guests groups.
They cannot modify the Administrators or Backup Operators groups, nor can they take ownership of files, back up or restore directories, load or unload device drivers, or manage the security and auditing logs.
Users
Members of the Users group can perform most common tasks, such as running applications, using local and network printers, and shutting down and locking the workstation. Users can create local groups, but can modify only the local groups that they created. Users cannot share directories or create local printers.
Guests
The Guests group allows occasional or one-time users to log on to a workstation's built-in Guest account and be granted limited abilities. Members of the Guests group can also shut down the system on a workstation.
Replicator
The Replicator group supports directory replication functions. The only member of the Replicator group should be a domain user account used to log on the Replicator services of the domain controller. Do not add the user accounts of actual users to this group.
