Windows SID: S-1-5-32-547 Create group / Windows SID: S-1-5-32-547 Gruppe anlegen

UCS - Univention Corporate Server
#1

Hello everybody

I am looking for a way to deposit an additional group with the SID: S-1-5-32-547 in the UCS.
The rights of the domain user are not sufficient for a normal operation with us.

How can I deposit this?

greeting
Michael

Hallo zusammen

ich suche eine Möglichkeit eine zusätzliche Gruppe mit der SID: S-1-5-32-547 im UCS zu hinterlegen.
Die Rechte der Domain User reichen für einen normalen Betrieb bei uns nicht aus.

Wie kann ich das hinterlegen?

Gruß
Michael

#2

Hello,

if I recall correctly, “Power Users” is not an Active Directory group or at least not present on Domain Controllers. but a local group on Windows clients and (non DC-)servers. It should be possible to add your users to this local group via Group Policy: http://www.expta.com/2011/02/adding-users-to-local-security-groups.html

Best regards,
Michael Grandjean

#3

Hi Michael

I have tested it and as far as it works.
The user is then an administrator if I look at it on the local machine
The power user has but only limited rights on the local machine

Why can not I adapt the SID and get the power user into the Built IN user and can thereby extend the functionality

greeting
Michael

Mastodon