Re: Windows 2003 Users vs Software
From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 02/27/05
- Next message: Roger Abell: "Re: Deny _WRITE_ access to a file"
- Previous message: Frank Saunders, MS-MVP IE/OE: "Re: Deleting Temporary Internet Files"
- In reply to: Jeff Cochran: "Re: Windows 2003 Users vs Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Sun, 27 Feb 2005 07:49:07 -0700
"Jeff Cochran" <jeff.nospam@zina.com> wrote in message
news:422ac9d4.1009479484@msnews.microsoft.com...
> On Fri, 25 Feb 2005 15:33:02 -0800, "Marilyne"
> <Marilyne@discussions.microsoft.com> wrote:
>
> >I am managing a network using 16 workstations sharing files on a Windows
2003
> >server. The users do not have rights to install programs. All users
have
> >Office 2003; however, each workstation has additional software that is
> >specific to their business specialty. There is only one software package
> >running off the server. My problem is when I install some software
packages
> >they do not work for the user using standard user rights.
> >
> >I have consulted other network techs regarding the problem and followed
> >various suggestions none of these ideas worked. It appears the server is
> >over-riding something in the software registry. Therefore the software
will
> >not initiate once the user has standard user rights to the machine. If I
get
> >an error it usually says the software was not installed properly. Once I
> >change the users rights to "Administrator" the software works.
> >
> >Iā?Tve tried changing the machine user rights so that the user has
> >administrative rights to his/her machine but as soon as they login with
their
> >standard user login created for the domain, the server over rides the
rights
> >and the software will not work.
> >
> >There are three software packages that are giving me this conflict. One
is
> >an engineering software, one is a form software and the other is a
software
> >that initiates the vinyl cutter. I have called the software vendors and
they
> >give me no technical advice. They don't know what would cause this
conflict.
> > I am looking forward to hearing some good advice.
> >
> >It has been suggested to me that I give the user administrative rights
and
> >give up. This means the user has access to payroll and account records
the
> >administration does not want public. If there is a way to give the users
> >administrative rights and limit their access to specific folders. I am
> >willing to make that adjustment.
>
> Some software requires local administrator rights to run. It has
> nothing to do with the server, it's the software and the way it's
> written. This shouldn't give users access to payroll, unless you
> install payroll records on every system. It's not admin rights on the
> server or domain, just the local system.
>
> Jeff
Hi Jeff,
While you are right about admin rights on the local server, etc..
it sounded like she found it not possible to provide local admin
to a domain user except by making them Domain Admin. This
is likely due to a GPO enforced definition of machine local
Administrators membership. However, her comment about
Payroll, etc., seemed to come from the one solution she had
found, making them Domain Admin . . .
The one application that controls the cutter may be problematic,
and very DOSish. But generally, if the application does not
make special hardware access, then it is often possible to
remove the admin requirement, which may be the case for the
rest of her applications, if not all.
-- Roger Abell
- Next message: Roger Abell: "Re: Deny _WRITE_ access to a file"
- Previous message: Frank Saunders, MS-MVP IE/OE: "Re: Deleting Temporary Internet Files"
- In reply to: Jeff Cochran: "Re: Windows 2003 Users vs Software"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
