From: John Beckett 

"Glenn Meadows"  wrote in message
news::
> I've run into a problem where there appears to be a Group Policy being
> enforced on users, where they are unable to change the local computer time,
> nor are they able to change timing on when the monitor goes off (Power
> settings).

I don't have time to be definite about this at the moment, but, if you want
users to be able to change the time on their workstation you generally put
the user in the Power Users local group on the workstation. Doing that also
allows them to share folders, create their own local users, and I think
something else of a minor nature (search Help for something like
"power users" rights).

By default, the Power Users group has the right to change the system time
of a computer.

However, in a domain you do NOT want people to be able to change the time.
Each workstation should be automatically synchronising with the domain
controller that has the "PDC emulator" role (by default, the
first domain controller). If the time/date/timezone is wrong, users can't
log on.

> Also, need help, I'd like to setup each user through group policy, so that
> when they logon, they have Power User status on their local machine, but no
> power user status on the network.

I believe there is no such a thing as power user status on the network.
That is, if I am in the Power Users group on all computers in a domain,
then I only get a benefit on the computer where I am actually logged on. I
get no benefit compared with someone who is only in the Users group, when I
access a computer over the network (except, someone could have given the
Power Users group permission to access some shared folder).

I don't have a definite answer, but the group policy is Restricted Groups.
The easiest would be to put the global group Domain Users in the local
Power Users group using a Restricted Groups policy. That would mean any
domain user is a power user at any machine where they can log on.

John

--- BBBS/NT v4.01 Flag-5