Re: Users with ADMIN profile

They absolutely do not need to be members of the domain admins group and at
the worst they would need to be a local administrator on their domain
computer. You also could try making them a power user [or apply the
compatws.inf security template] on their local computer. Beyond that you
would have to look at tweaking permissions for the folders that the
application uses and possibly the HKLM software key for the application. The
usual places where you may need to give the user
read/list/execute/write/modify permissions is the application folder in the
program files folder, any subfolder for the application in the program
files\common files folder, and possibly any subfolder for the application in
the documents and settings\all users\application data folder. --- Steve


"mahmad" <mahmad@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:73D66B64-4954-447A-B97B-EBE4CC3F8C35@xxxxxxxxxxxxxxxx
> Hi,
>
> We network at present is as follows:
> We have both a NT and 03 Domain. There is a two way trust between the NT4
> and Windows 2003 server. The client machines are either Win2k or XP Pro
> with
> the latest service packs.
>
> The users logon to the 03 domain and are authenticated etc via this
> domain.
> The problem i have is that unless the users are a member of the Domain
> Admins
> group, certain programs on their pc will not work. Of course i dont want
> everyone playing about with the domain and have such a high security
> access.
>
> To setup a basic user on the windows xp or win2k, do they need to be a
> member of the local machine interms of security. Can i give everyone
> differnet access via the Group policy editor.
>
> Thanks for your help
>
> Mo


.

Relevant Pages

  • Re: VERY odd issue with OWA
    ... Is everyone in the environment a member of the Domain Admins group? ... the security on the Store.... ... > Lord, I wouldn't DARE put anything that needs ANY ...
    (microsoft.public.exchange2000.admin)
  • Re: Role of current windows login user
    ... as Windows based 'roles' are mapped to "Windows security group" ... generic member of a sales department. ... |> opens the resource, this is the task of the OS and not the ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: AD Magic
    ... The point is that you check if the user are member of the groups which are effected by the automatic reset. ... permissions to access the mailbox and go through the items therein ... If a security descriptor for a user account ...
    (microsoft.public.windows.server.active_directory)
  • Re: Outside Users RDP into WS2008???
    ... my boss places independent contractors that have high-level ... tech/government/financial and other companies requiring hi security. ... add 'G-Consultants' to be a member of 'DL-Consultants' ... End disconnected session: ...
    (microsoft.public.windows.server.general)
  • item level based security samples needed...
    ... I'm looking for some sample to implement an item level security system in my ... The company has some organizationnal units. ... member of "organization XXX project user" ... So, when I display a project, I want to hide some edit buttons if the user ...
    (microsoft.public.dotnet.framework.aspnet)