Power Users and Group Policies

[troxy]

Hi,

I've been struggling with Group Policies in Windows XP.

I'm trying to grant some extra rights to a Power User (ie. a member of the Power Users group).

Some policy settings simply won't stick or are being overridden.

For example: NC_LanChangeProperties, DisableWindowsUpdateAccess etc.

Could anyone please confirm that you cannot, under any circumstances allow Power Users to perform the following tasks:

• Modify settings for Windows Firewall
  
• Modify settings for Windows Update/Automatic Updates
  
• Modify all settings for Network Connections
  
• Install or update device drivers
  

Thanks!

Edited March 8, 2009 by troxy

[Tripredacus]

Are these local policies or are you applying a Domain GP, also if so, what Server are you using?