Re: Power Users vs. Restricted user - Win2000

From: Laura A. Robinson (larobins@bellatlantic.net)
Date: 06/05/02 

From: "Laura A. Robinson" <larobins@bellatlantic.net>
To: <emann@questinc.org>, <focus-ms@securityfocus.com>
Date: Wed, 5 Jun 2002 12:31:26 -0400

http://www.microsoft.com/windows2000/techinfo/planning/security/secdefs.asp

Laura
----- Original Message -----
From: <emann@questinc.org>
To: <focus-ms@securityfocus.com>
Sent: Wednesday, June 05, 2002 10:58 AM
Subject: Power Users vs. Restricted user - Win2000

> I've done a lot of searching to try and find a comprehensive list of all
> known differences in access rights and capabilities between Power Users
and
> Users (restricted users) on Windows 2000 domain, but just can't seem to
come
> up with anything that really lays it all out.
>
> Has anyone compiled a list that details the difference in the two groups?
>
> On the same subject, I need my users the ability to share their files
> (requires Power Users group), but I don't want them to have the ability to
> install programs which Power Users group will let them do to a degree
(many
> programs will install, many won't). I looked through all the GPO options
> and can't seem to find anything that specifically restricts the
installation
> of software. Perhaps I over looked it? Is there some definative way to
> restrict users on Windows 2000 machines with Power User acccess from
> installing any type of software?

Relevant Pages

  • Re: User can share a directory but unable to install software.
    ... If they need to create shares then they need to be at least power users, ... software other than the settings for disallowed or only allowed Windows ... > This helps us controlling that user can not install any software. ...
    (microsoft.public.win2000.security)
  • Re: Want to play game in non-Admin logon
    ... Rick Rogers aka "Nutcase" MS-MVP - Windows ... >I just installed a game on my XP-Pro but it made me install it as an ... I have to play it as an Admin but do not want ... > to and want it available to at least the Power Users on my machine. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Is this possible: watch and change a service
    ... on a handful. ... can install or start and stop services from permissions stand point, ... apply whether you use the Control Panel, command line tools, or the Windows ... "Power Users": Can see the list of services, start, or stop services. ...
    (microsoft.public.vb.general.discussion)
  • why can they install!
    ... local rights on a windows XP machine. ... tries to install it under c:\program files, ... They are not admins or power users just normal ...
    (microsoft.public.windows.file_system)
  • Re: Security Templates
    ... You're trying to deny them the ability to install programs. ... Windows cannot stop them from running arbitrary programs. ... Even if you do add these restrictions, they can get full local SYSTEM ... I am trying to change the Power Users group so that they can ...
    (microsoft.public.win2000.security)