Re: Users and local admin rights??

From: Miha Pihler [MVP] (mihap-news_at_atlantis.si)
Date: 11/17/05 

Date: Thu, 17 Nov 2005 17:06:51 +0100

You should add Authenticated Users group to what policy (for what
permission)? Be more specific.

If users can do their work with only users permissions then this is all they
should be... 

-- 
Mike
Microsoft MVP - Windows Security
"WetBehindEars" <WetBehindEars@discussions.microsoft.com> wrote in message 
news:2E576C19-8E64-4A0E-AE32-D69689E00085@microsoft.com...
> Well I have just been taken notice of users account setups when I make 
> visits
> to their workstations and see them setup as Admins, Power Users and some 
> even
> as debuggers.  I trying to find out what is the best possible solution to 
> set
> users up as.  I  heard that you should add Authenticated Users group to 
> every
> workstation.  Is this true?
>
> "Miha Pihler [MVP]" wrote:
>
>> Users should _in general_ be only Users on their computers. Not
>> Administrators and not Power Users...
>>
>> What would be your reasons to make users Power Users? What do they need 
>> to
>> do?
>>
>> -- 
>> Mike
>> Microsoft MVP - Windows Security
>>
>> "WetBehindEars" <WetBehindEars@discussions.microsoft.com> wrote in 
>> message
>> news:C2249F8D-0EE2-4525-8594-C0949777F2E6@microsoft.com...
>> > Should users of their PCs have local admin rights?  Or should they be 
>> > put
>> > in
>> > the Power Users group?
>>
>>
>>

Relevant Pages

  • Re: User Account Privileges
    ... Power Users group. ... >>I all depends on what the "extra" privs are. ... >>lines other than the Administrators, Power Users, ... >>accounts are usually coded so that these can only ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Permit "Create Shared Folders" to a non Local administrator or Power User
    ... I find we cannot let an account in Users group ... I think you can add your users to the Power Users group and restrict the ... ensure that we are continuously developing Microsoft products to meet ... >I want my users to be able to share folders without beeing able to install ...
    (microsoft.public.win2000.security)
  • Re: Remote User Management
    ... Under System Tools, Local Users and Groups, it didn't show the network ... Power Users, it doesn't necessarily remove access to the workstation. ... the Domain Users group is part of the local ... that is in the Domain Users group can access the PC as a normal user. ...
    (microsoft.public.windowsxp.general)
  • Re: Power Users in XP Professional
    ... The Power Users group primarily provides backward compatibility for running ... Members of the Power Users group have more permissions than members of the ... The default Windows 2000 and Windows XP Professional ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Adding a local printer
    ... member of the ADMIN or POWER USERS group can’t add local printers? ... users group and NOT a member of the ADMIN or POWER USERS group but is a part ... (Tested this one and the local printer ...
    (microsoft.public.windowsxp.configuration_manage)