Here is what I want to do. I want to implement a new XP Pro box into an already existing domain. After setting up the workstation for domain login, I want to use the Admin account to give a user Power User privlidges to the domain from the XP machine. For example, after the computer is part of the domain, I would go into the User Accounts section of the local XP Pro box and create a user (username from domain), and give them Power User rights to the domain. If I do this how much rights am I acutally giving to the network (domain)? Their actual domain account would be in the domain\users group. Also, would I be able to prevent normal local Power User rights via GPO's within the domain? The reason I ask this is because we are going to implement an application on our network that requires each user to have Power User privlidges to the domain via the local computer (there is no way around this). Does this make any sense, or should I try to explain it a little more clearly?

they would have power user rights on the local machine but only Domain Users rights on the network, unless you join the local accounts to an OU on the server. where is the account they will be logging into the computer with, on the domain controller or on the local machine?

They will be loggin into an Active Directory domain account on the network and not the local machine

" The reason I ask this is because we are going to implement an application on our network that requires each user to have Power User privlidges to the domain via the local computer (there is no way around this). " Let's start here. I think I would NOT use this program. XP can be configured to be very precise in how users have access in a domain. What you suggest is very poor judgement. You really should not have all these people with power user domain login. In any case you can still use runas maybe. MS offers many security templates for 2003 that might help. Their web pages offer solutions to legacy programs. I'd repost the question with the program named. You might consider a virtual server or computer and limit access to the domain.

They would not have power user access to the domain, only to the local machine.