Re: Users with ADMIN profile

=?Utf-8?B?bWFobWFk?= <mahmad@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
news:73D66B64-4954-447A-B97B-EBE4CC3F8C35@xxxxxxxxxxxxx:

> Hi,
>
> We network at present is as follows:
> We have both a NT and 03 Domain. There is a two way trust between
> the NT4 and Windows 2003 server. The client machines are either
> Win2k or XP Pro with the latest service packs.
>
> The users logon to the 03 domain and are authenticated etc via
> this domain. The problem i have is that unless the users are a
> member of the Domain Admins group, certain programs on their pc
> will not work. Of course i dont want everyone playing about with
> the domain and have such a high security access.
>
> To setup a basic user on the windows xp or win2k, do they need to
> be a member of the local machine interms of security. Can i give
> everyone different access via the Group policy editor.

Use Filemon and Regmon to find the permission issues and then open
those files/registry entries up in GP:

http://aleinsstechtips.blogspot.com/2005_09_01
_aleinsstechtips_archive.html

Also, you can make their a local administrator on their box, but that
is not recommended.

Adam
.

Relevant Pages

  • Re: Users with ADMIN profile
    ... They absolutely do not need to be members of the domain admins group and at ... compatws.inf security template] on their local computer. ... program files folder, any subfolder for the application in the program ... > The problem i have is that unless the users are a member of the Domain ...
    (microsoft.public.security)
  • Re: Windows 2000 and GPO
    ... DNS is ok, only one remark, change the loopback address to the real DNS server ip. ... Please post a gpresult /v from one workstation when you run it as a user. ... When a user is member of Domain Admins group GPOs work well. ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows 2000 and GPO
    ... WKS IPCONFIG ... When a user is member of Domain Admins group GPOs work well. ... There are problems only for users not members of Domain Admins group!!!!! ...
    (microsoft.public.win2000.active_directory)
  • Re: primission problme
    ... I thought my workstation was joined with server. ... it as a member of domain but was not joined.. ... the global domain admins group by default would be in the local ...
    (microsoft.public.win2000.security)