Power Users vs. Restricted user - Win2000

From: emann@questinc.org
Date: 06/05/02 

From: emann@questinc.org
To: focus-ms@securityfocus.com
Date: Wed, 5 Jun 2002 10:58:58 -0400

I've done a lot of searching to try and find a comprehensive list of all
known differences in access rights and capabilities between Power Users and
Users (restricted users) on Windows 2000 domain, but just can't seem to come
up with anything that really lays it all out.

Has anyone compiled a list that details the difference in the two groups?

On the same subject, I need my users the ability to share their files
(requires Power Users group), but I don't want them to have the ability to
install programs which Power Users group will let them do to a degree (many
programs will install, many won't). I looked through all the GPO options
and can't seem to find anything that specifically restricts the installation
of software. Perhaps I over looked it? Is there some definative way to
restrict users on Windows 2000 machines with Power User acccess from
installing any type of software?

Relevant Pages

  • RE: Power Users change?
    ... the rights and permissions that are granted to the Power Users ... members of the Power Users group to modify computer-wide settings, ... install drivers, and to run non-certified programs. ...
    (microsoft.public.windows.server.migration)
  • Re: Power User Account corrupted?
    ... Are you sure these programs do not need you to be a local administrator? ... If other power users that are not also local administrators can install them ... to folders as powers users on the computers where it works. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Local Computer Access In AD
    ... You need to first catalogue what specific privileges ... users can install their own programs. ... Add the user to the Power Users group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Users vs. Power Users
    ... in article 05cb01c2d921$04be8c60$3301280a@phx.gbl, James Raaymakers MCSE at ... > Power Users can install software as long as the software ... > install software like this. ... > Power Users Group. ...
    (microsoft.public.win2000.security)
  • Re: What right allows full access?
    ... ACL to replace any anywhere in the substructure. ... the install drive has many places ... > I would not grant Full access to Power Users group if I could make a copy ... > and checked 'Replace permission entries on all child objects with entries ...
    (microsoft.public.windowsxp.security_admin)