I am having problems with active directory user permissions on our new XP pro machines. If i log in to AD as an Admin, I can run and install any programs i want. When i log out as an Admin and log back in as the user, there are a couple programs that won't run? It says i don't have the right permissions. However, if i manually go into the local computers users and add the user as a "power user" i can run the programs then? I think is has something to do with Legacy software, but i'm not sure. What is the difference between XP Pros "Power User" permissions and Active Directorys "User" permissions? Is there some way to upgrade or modify the Active Directorys "User" permissions so they can run this software? I want AD to pass down the permissions so I don't have to create local computer users! I also don't want to set up general users as administrators just so they can run certain software. Any ideas?

Power Users (NT or XP) have elevated privileges...above user, but not near as permissive as Admins. Not necessary to create local accounts, nor should you add the users to the local Admin group. What I do, is just correct the file permissions on the particular software folder on the Local Machine. Ie, C:\Program Folder\Adobe, and give everyone (or authenticated users if you prefer), full control of the folder and all subfolders and files. It works just fine... On some programs, you'll also have to do the same thing on the program folder after running regedt32 and opening HKEY_LOCAL_MACHINE\Software.