Permissions in Domain Local group

From: Bob Feller (Feller_at_discussions.microsoft.com)
Date: 04/07/05


Date: Thu, 7 Apr 2005 07:45:05 -0700

I don't know if this is the right forum for this, so please forgive me if
it's not.
Hi,
I'm trying to find the best way to create a standardized desktop for all
users. There will be several desktops (different desktops for different
departments) I have a single Windows 2000 domain. I have researched this and
it seems like the best way to do it would be create a Global Group, add that
to a Local Group, and assign permissions to the local group. I don't kow how
or where to add permission to users in the local group. I'm familiar with
group policy, but I don't know if that applies here. The workstations will
all be XP, will this cause a problem?
If anyone needs any other information, please let me know..
Thanks!



Relevant Pages

  • Re: local group / global group permissions problem
    ... It appears to have been a DNS problem. ... > global group in effective permissions. ... > the local group however as you mention. ... As far as the firewall, if you can temporarily disable it ...
    (microsoft.public.windows.server.security)
  • Re: Restrict Users from Installing programs
    ... permissions to the root/drive folder and be sure to check advanced ... applications will try to create a folder during the install. ... Use local Group policy via gpedit.msc. ...
    (microsoft.public.win2000.networking)
  • Re: Limiting Limited Access Accounts.
    ... Go to properties/security/advanced and remove the permissions ... Create a local group and name it students. ... permissions on any program folder or stand alone executable you do not want ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Settle a Administrators dispute
    ... Joe -- I do believe he's dorked with the permissions and I looked at the ... Administrators Local Group ON THE DOMAIN CONTROLLER. ... Administrators Local Group on the DC but not in the Domain Admins Global ...
    (microsoft.public.windows.server.active_directory)
  • Re: Cant access Network Share
    ... Try adding the global group to a local group on the computer with the shared ... > two way trust to a native win2K domain and we will call it "DOMAIN2". ... > to log onto the share because they do not have the necessary permissions. ...
    (microsoft.public.win2000.security)

Loading