Remove the "Domain Users" group from the "Power Users" group..

From: Netmasker (netmasker@yahoo.com)
Date: 11/30/02 

From: "Netmasker" <netmasker@yahoo.com>
Date: Sat, 30 Nov 2002 19:42:01 +0200

In my windows 2000 SP3 workstations I noticed that "Power Users" group
include (has as member) "Domain Users" group. This mean that the domain
users that log in to the workstations have Power Users rights, doesn' t it?
I would like my domain users to have only "Read & Execute Access" on folders
like
'Program files', 'Winnt' etc. so they will not be able to install programs
or hide files in these folders. But Power Users have "write access" on these
folders and that's the problem.
How safe is it to remove the "Domain Users" group from the "Power Users"
group membership ??

thanks in advance.

Relevant Pages

  • Re: Share Folder Permission on xp in a 2003 domain
    ... If you really really need your users to be power users I'd choose to ... use restricted groups to make Domain Users member of the local Power ... > create permenant shared objects ...
    (microsoft.public.win2000.active_directory)
  • Re: "you do not have access to log onto this session" error
    ... group like "power users" and still gives the domain users group remote ... This posting is provided "AS IS" with no warranties, and confers no rights. ... If I add the user account to the Remote Desktop> group I can log on fine, but then the user isn't a member ... I then also>>> grante the same rights to domain users (the user I am ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: restricted groups
    ... I believe you can do this from the DC even though there isn't a Power Users ... If you were to do this from a machine using the adminpak then the Power ... you should get this from a Win2000 server; ... >> restricted group setting to make the domain users group a member of the ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remove the "Domain Users" group from the "Power Users" group..
    ... Domain Users should be members of Power Users at all. ... workstations, they certainly don't have to be Power Users. ...
    (microsoft.public.win2000.security)
  • Re: Create Shared Folders With Domain User Rights
    ... automatically adds (For example all members in Domain Users to the local ... > computers. ... > local group " Power users " But I want a centralized Soloution. ...
    (microsoft.public.win2000.active_directory)