I have two question regarding Power User right in Windows 7 running on the Windows 2003 Domain environment: 1, I have a logon script running on Windows 7 and it is ok for users who have Local Administrator right to run. However, for the user which has Power User right, it cannot run which show "Access Denied" 2, Is it by default the folder under C drive like "C:\Program files" don't have the Power Users group on it. And it need to add the Power User group on that folder by changing the Owner of that folder first. Any idea on this?

Hello, you have not specified what this script perform exactly. If you should have specific rights on a certain folder then check that all is okay with NTFS/Share permissions of your users. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

But actually the folder level has been granted to Power User group. And it is still have "Access denied" error. Any idea?

Disable UAC and try again. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration

I have set UAC to never notify, is it the Windows 7 Power User group cannot run the registry and do some copy files in the Logon script and need local admin right?

Hi Ivan, In Windows Vista and later Windows operating systems, the permissions and rights that are associated with the Power Users group have been removed. Therefore, the Power Users group no longer has elevated permissions. Please refer to: Permissions and rights have been removed from the Power Users group in Windows Vista. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

So when we need to run the logon script which include some registry change and files copy. Is that mean we need to grant the local administrator right to the user and no other method can be used?

You can assign a logon script as part of the group policy. All users who are member of the site, domain, or organizational unit, execute script automatically when they log on. This is for your reference: Creating & Running a Logon Script Regards, Miya Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.This posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

But how about the local Windows 7 user is only power user right, is that still can run registry change in Windows 7 logon script?

Hi Ivan, Refer to here: http://technet.microsoft.com/en-us/library/cc770908.aspx Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

I cannot see it can set the permission or run with highest privileges for the Power User in Windows 7 so that it can run the registry change. Please advise.

Sorry for missing the local user. If it's local Power User and the script need to change the registry, I'm afraid it cannot be achieved. If it's in a domain, and it will work. Regards, MiyaThis posting is provided "AS IS" with no warranties, and confers no rights. | Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

But how it set the permission or run with highest privileges for the Power User in Windows 7 in the Domain environment?