What does the Windows 7 local group Power Users actually do? Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!How much power does Windows 7 realistically (typically) save?User in group with r/w access does not actually get the read/write anythingHow does Windows hide internal users?View windows 7 effective firewall rules when controlled by group policyWhen should Windows account be in the Users group?How to add local group to “Remote Desktop Users” group in Windows 7 proWhat is a difference between a member of “Users” group and not a member of any group on Windows?how do I add a group to the Remote Desktop Users group on a local machine from the domain controller?Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator canRemoving Domain Users group from Local Users group best practice
What's the difference between `auto x = vector<int>()` and `vector<int> x`?
What is this single-engine low-wing propeller plane?
How do I mention the quality of my school without bragging
Does surprise arrest existing movement?
Single word antonym of "flightless"
How to bypass password on Windows XP account?
Antler Helmet: Can it work?
Super Attribute Position on Product Page Magento 1
Is there a "higher Segal conjecture"?
Do you forfeit tax refunds/credits if you aren't required to and don't file by April 15?
Do I really need recursive chmod to restrict access to a folder?
Diagram with tikz
Why aren't air breathing engines used as small first stages
If 'B is more likely given A', then 'A is more likely given B'
Dominant seventh chord in the major scale contains diminished triad of the seventh?
Using et al. for a last / senior author rather than for a first author
How to deal with a team lead who never gives me credit?
Why don't the Weasley twins use magic outside of school if the Trace can only find the location of spells cast?
How to find all the available tools in macOS terminal?
Determinant is linear as a function of each of the rows of the matrix.
How do I keep my slimes from escaping their pens?
Is there a documented rationale why the House Ways and Means chairman can demand tax info?
Why did the IBM 650 use bi-quinary?
What LEGO pieces have "real-world" functionality?
What does the Windows 7 local group Power Users actually do?
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!How much power does Windows 7 realistically (typically) save?User in group with r/w access does not actually get the read/write anythingHow does Windows hide internal users?View windows 7 effective firewall rules when controlled by group policyWhen should Windows account be in the Users group?How to add local group to “Remote Desktop Users” group in Windows 7 proWhat is a difference between a member of “Users” group and not a member of any group on Windows?how do I add a group to the Remote Desktop Users group on a local machine from the domain controller?Users in Administrators group cannot perform admin tasks with PowerShell remoting only administrator canRemoving Domain Users group from Local Users group best practice
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
A client wants a new bit of software. Typically they are on the cusp of signing a contract before they happen to mention it to IT in passing.
A skim through the technical requirements show nothing extraordinary, except that all users of the client/agent software need 'power user' rights to their local machine. This is to be deployed in a call centre where I wouldn't consider the usres to be 'trusted' in the same way as in other parts of the business.
Therefore I immediately baulked at this, however it seems that in Windows 7 power users doesn't do anything.
On XP it gave you 'a bunch of access' and I don't think I know anywhere that its ever been used. I have to admit I haven't even given it a thought since Vista onwards.
Checking secpol.msc on a Win 7 machine, the user rights assignment doesn't show anything associated with power users. However its description would have you believe that "Power Users are included for backwards compatibility and possess limited administrative powers"
Does anyone know what these 'limited administrative powers' actually are?
Microsoft don't appear to have produced any document (i couldn't find one anyway) that details exactly what this group does, and the only detailed technical descriptions I could find all date back to 2003/xp and before.
windows-7 user-permissions user-accounts
edited Aug 26 '17 at 1:15
peterh
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
add a comment |
A client wants a new bit of software. Typically they are on the cusp of signing a contract before they happen to mention it to IT in passing.
A skim through the technical requirements show nothing extraordinary, except that all users of the client/agent software need 'power user' rights to their local machine. This is to be deployed in a call centre where I wouldn't consider the usres to be 'trusted' in the same way as in other parts of the business.
Therefore I immediately baulked at this, however it seems that in Windows 7 power users doesn't do anything.
On XP it gave you 'a bunch of access' and I don't think I know anywhere that its ever been used. I have to admit I haven't even given it a thought since Vista onwards.
Checking secpol.msc on a Win 7 machine, the user rights assignment doesn't show anything associated with power users. However its description would have you believe that "Power Users are included for backwards compatibility and possess limited administrative powers"
Does anyone know what these 'limited administrative powers' actually are?
Microsoft don't appear to have produced any document (i couldn't find one anyway) that details exactly what this group does, and the only detailed technical descriptions I could find all date back to 2003/xp and before.
windows-7 user-permissions user-accounts
edited Aug 26 '17 at 1:15
peterh
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
add a comment |
A client wants a new bit of software. Typically they are on the cusp of signing a contract before they happen to mention it to IT in passing.
A skim through the technical requirements show nothing extraordinary, except that all users of the client/agent software need 'power user' rights to their local machine. This is to be deployed in a call centre where I wouldn't consider the usres to be 'trusted' in the same way as in other parts of the business.
Therefore I immediately baulked at this, however it seems that in Windows 7 power users doesn't do anything.
On XP it gave you 'a bunch of access' and I don't think I know anywhere that its ever been used. I have to admit I haven't even given it a thought since Vista onwards.
Checking secpol.msc on a Win 7 machine, the user rights assignment doesn't show anything associated with power users. However its description would have you believe that "Power Users are included for backwards compatibility and possess limited administrative powers"
Does anyone know what these 'limited administrative powers' actually are?
Microsoft don't appear to have produced any document (i couldn't find one anyway) that details exactly what this group does, and the only detailed technical descriptions I could find all date back to 2003/xp and before.
windows-7 user-permissions user-accounts
edited Aug 26 '17 at 1:15
peterh
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
A client wants a new bit of software. Typically they are on the cusp of signing a contract before they happen to mention it to IT in passing.
A skim through the technical requirements show nothing extraordinary, except that all users of the client/agent software need 'power user' rights to their local machine. This is to be deployed in a call centre where I wouldn't consider the usres to be 'trusted' in the same way as in other parts of the business.
Therefore I immediately baulked at this, however it seems that in Windows 7 power users doesn't do anything.
On XP it gave you 'a bunch of access' and I don't think I know anywhere that its ever been used. I have to admit I haven't even given it a thought since Vista onwards.
Checking secpol.msc on a Win 7 machine, the user rights assignment doesn't show anything associated with power users. However its description would have you believe that "Power Users are included for backwards compatibility and possess limited administrative powers"
Does anyone know what these 'limited administrative powers' actually are?
Microsoft don't appear to have produced any document (i couldn't find one anyway) that details exactly what this group does, and the only detailed technical descriptions I could find all date back to 2003/xp and before.
windows-7 user-permissions user-accounts
windows-7 user-permissions user-accounts
edited Aug 26 '17 at 1:15
peterh
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
edited Aug 26 '17 at 1:15
peterh
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
edited Aug 26 '17 at 1:15
peterh
4,41192442
edited Aug 26 '17 at 1:15
peterh
4,41192442
edited Aug 26 '17 at 1:15
peterh
4,41192442
4,41192442
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
asked Jul 24 '13 at 9:48
PatrickPatrick
88611034
88611034
add a comment |
add a comment |
3 Answers
3
active
oldest
votes
You're correct, the Power Users group does not do anything at all in Windows Vista and later.
From http://technet.microsoft.com/en-us/library/cc771990.aspx:
By default, members of this group have no more user rights or
permissions than a standard user account. The Power Users group in
previous versions of Windows was designed to give users specific
administrator rights and permissions to perform common system tasks.
In this version of Windows, standard user accounts inherently have the
ability to perform most common configuration tasks, such as changing
time zones. For legacy applications that require the same Power User
rights and permissions that were present in previous versions of
Windows, administrators can apply a security template that enables the
Power Users group to assume the same rights and permissions that were
present in previous versions of Windows.
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
add a comment |
Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I upgraded myself to the Power Users group (I had already enabled the right options in Trust Center), I can record, write, or run vba solutions as I do when logged in with my administrator account.
Caveat: This was tested in a Windows 7 environment with O365 only for Outlook, so I can't swear it will work for the other apps, but VBA permissions have never varied per-application before, so I'm assuming it will be the same for the Excel, Word, and PowerPoint macros.
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
add a comment |
Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power Users, the domain account could not create the share. Useful if you do not want to make an account an Admin just to be able to create shares.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f525880%2fwhat-does-the-windows-7-local-group-power-users-actually-do%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
3 Answers
3
active
oldest
votes
3 Answers
3
active
oldest
votes
active
oldest
votes
active
oldest
votes
You're correct, the Power Users group does not do anything at all in Windows Vista and later.
From http://technet.microsoft.com/en-us/library/cc771990.aspx:
By default, members of this group have no more user rights or
permissions than a standard user account. The Power Users group in
previous versions of Windows was designed to give users specific
administrator rights and permissions to perform common system tasks.
In this version of Windows, standard user accounts inherently have the
ability to perform most common configuration tasks, such as changing
time zones. For legacy applications that require the same Power User
rights and permissions that were present in previous versions of
Windows, administrators can apply a security template that enables the
Power Users group to assume the same rights and permissions that were
present in previous versions of Windows.
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
add a comment |
You're correct, the Power Users group does not do anything at all in Windows Vista and later.
From http://technet.microsoft.com/en-us/library/cc771990.aspx:
By default, members of this group have no more user rights or
permissions than a standard user account. The Power Users group in
previous versions of Windows was designed to give users specific
administrator rights and permissions to perform common system tasks.
In this version of Windows, standard user accounts inherently have the
ability to perform most common configuration tasks, such as changing
time zones. For legacy applications that require the same Power User
rights and permissions that were present in previous versions of
Windows, administrators can apply a security template that enables the
Power Users group to assume the same rights and permissions that were
present in previous versions of Windows.
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
add a comment |
You're correct, the Power Users group does not do anything at all in Windows Vista and later.
From http://technet.microsoft.com/en-us/library/cc771990.aspx:
By default, members of this group have no more user rights or
permissions than a standard user account. The Power Users group in
previous versions of Windows was designed to give users specific
administrator rights and permissions to perform common system tasks.
In this version of Windows, standard user accounts inherently have the
ability to perform most common configuration tasks, such as changing
time zones. For legacy applications that require the same Power User
rights and permissions that were present in previous versions of
Windows, administrators can apply a security template that enables the
Power Users group to assume the same rights and permissions that were
present in previous versions of Windows.
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
You're correct, the Power Users group does not do anything at all in Windows Vista and later.
From http://technet.microsoft.com/en-us/library/cc771990.aspx:
By default, members of this group have no more user rights or
permissions than a standard user account. The Power Users group in
previous versions of Windows was designed to give users specific
administrator rights and permissions to perform common system tasks.
In this version of Windows, standard user accounts inherently have the
ability to perform most common configuration tasks, such as changing
time zones. For legacy applications that require the same Power User
rights and permissions that were present in previous versions of
Windows, administrators can apply a security template that enables the
Power Users group to assume the same rights and permissions that were
present in previous versions of Windows.
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
answered Jul 24 '13 at 10:12
pauskapauska
18.2k44975
18.2k44975
add a comment |
add a comment |
Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I upgraded myself to the Power Users group (I had already enabled the right options in Trust Center), I can record, write, or run vba solutions as I do when logged in with my administrator account.
Caveat: This was tested in a Windows 7 environment with O365 only for Outlook, so I can't swear it will work for the other apps, but VBA permissions have never varied per-application before, so I'm assuming it will be the same for the Excel, Word, and PowerPoint macros.
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
add a comment |
Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I upgraded myself to the Power Users group (I had already enabled the right options in Trust Center), I can record, write, or run vba solutions as I do when logged in with my administrator account.
Caveat: This was tested in a Windows 7 environment with O365 only for Outlook, so I can't swear it will work for the other apps, but VBA permissions have never varied per-application before, so I'm assuming it will be the same for the Excel, Word, and PowerPoint macros.
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
add a comment |
Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I upgraded myself to the Power Users group (I had already enabled the right options in Trust Center), I can record, write, or run vba solutions as I do when logged in with my administrator account.
Caveat: This was tested in a Windows 7 environment with O365 only for Outlook, so I can't swear it will work for the other apps, but VBA permissions have never varied per-application before, so I'm assuming it will be the same for the Excel, Word, and PowerPoint macros.
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
Not quite true - if you use Office 2016/O365, all macros are disabled until you are at least a power user. You can enable anything you like and there is no error - it just doesn't work. But after I upgraded myself to the Power Users group (I had already enabled the right options in Trust Center), I can record, write, or run vba solutions as I do when logged in with my administrator account.
Caveat: This was tested in a Windows 7 environment with O365 only for Outlook, so I can't swear it will work for the other apps, but VBA permissions have never varied per-application before, so I'm assuming it will be the same for the Excel, Word, and PowerPoint macros.
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
answered Aug 25 '17 at 20:22
Jennifer ThomasJennifer Thomas
211
211
add a comment |
add a comment |
Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power Users, the domain account could not create the share. Useful if you do not want to make an account an Admin just to be able to create shares.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power Users, the domain account could not create the share. Useful if you do not want to make an account an Admin just to be able to create shares.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power Users, the domain account could not create the share. Useful if you do not want to make an account an Admin just to be able to create shares.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Power Users also allows an account to create shares. I tested it by creating shares in a cluster with new-smbshare command where I only added the domain account to Power Users. Without being in Power Users, the domain account could not create the share. Useful if you do not want to make an account an Admin just to be able to create shares.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
answered Apr 10 at 16:12
John MeragerJohn Merager
211
answered Apr 10 at 16:12
John MeragerJohn Merager
211
211
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
John Merager is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f525880%2fwhat-does-the-windows-7-local-group-power-users-actually-do%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
