Problem solve Get help with specific problems with your technologies, process and projects.

Can Group Policy be used to change local user permissions?

In this network security Ask the Expert Q&A, Mike Chapple reveals how to deploy a script and use Group Policy to change local user permissions.

Is there a script that can be deployed through Group Policy that can change local user permissions on a workstation? For example, I want to change user1 from having local admin rights to having the settings of a power user.
Yes, you certainly can write a script to perform this function. You should use Group Policy to change a user's membership in local groups.

If you'd like some help writing your script, the white paper Using Group Policy for Enterprise Desktop Management...

provides a good start.

More information
  • Learn how to manage user permissions.
  • Should employees have local admin rights?
  • This was last published in October 2006

    Dig Deeper on Web authentication and access control

    Have a question for an expert?

    Please add a title for your question

    Get answers from a TechTarget expert on whatever's puzzling you.

    You will be able to add details on the next page.

    Start the conversation

    Send me notifications when other members comment.

    By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

    Please create a username to comment.