is there a way to edit a group permission? I want to create my own group that has the permission to use a dvd-rw or use remote desktop or enablesome specific privilege oranythink.

Hi ostem, One simple method is to let the self-created group to be the member of the built-in groups accordingly. For example, in order to have permission to remotely logon, you can add the self-created group to the Remote Desktop Users group. Hope it helps. Sincerely, Joson Zhou Microsoft Online Community Support

Iwant to seethepermissionandallthethingsthatmakeagroupdifirentfromeachothersoIcancreateagroupwithrefinedpermissions. Is there something like an acl editor for a group?Thank you for your time.

Hi ostem, You may consider to configure the policies in User Rights Assignment, which includes almost all system privileges. To view User Rights Assignment, please perform the following steps: 1. Log onto Windows Vista with an account that is a member of administrators group. 2. Click Start, type secpol.msc in the Start Search box, and press Enter. 3. In the Local Security Policy window, expand Local Policies, and you will see User Rights Assignment. Note: Youd better not modify the privileges of the built-in groups since this can cause unexpected issues. Ive also included the following information about user rights for your reference: Rights http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsce_ctl_gqzu.mspx?mfr=true User Rights Assignment http://technet2.microsoft.com/WindowsServer/en/library/71b2772f-e3c0-4134-b7f0-54c244ee9aef1033.mspx?mfr=true Hope it helps. Sincerely, Joson Zhou Microsoft Online Community Support

Sorry for the delayI've try that way but after i assign "Allow logon through Terminal Services" to a group/user andwhenitryloginremotelyigetanerrormessage: "The connection was denied because the user accout is not authorized for remote login".I have vista business.

Hi ostem, It can occur if specific windows objects are granted the permission to the Remote Desktop Users but not the self-created group. As a result, we suggest adding the self-created groups to be the member of the built-in groups in order to inherit the permissions. It is also convenient for management. Thank you for your understanding.

thanks but what should I do if the buil-in group is missing?

Hi osterm, Built-in accounts cannot be deleted.

Hi there, how to add a self-created group into built-in groups ? And i have another concern, that is If there is an account which was inactive (not login) for a long time - 30 days perhaps, this account could be expired or changed password ? (The check box of this user: Password is never expired is checked) Thanks you very much