Can anything be done to add our domain users to the local Power Users group on every machine by default?<P>Basically, when a domain user logs into a machine, I would like them to be a Power User ...

In the scenario where users cannot be added on a Windows Server because the Add User or Group button is grayed out in User Rights Assignment in Domain Controller Local Security Policy settings ...

P>For security reasons, I thought it would be a good idea to remove these accounts from the "Domain Users" group and then add them to the local Users of the one or two servers they needed to have ...