Re: Users vs. Power Users

From: x y, mvp (levinson_k@despammed.com)
Date: 02/21/03 

From: "x y, mvp" <levinson_k@despammed.com>
Date: Fri, 21 Feb 2003 08:37:34 -0500

The most important differences can be seen by launching gpedit.msc or by
launching MMC and adding the Group Policy snapin to look at the user
permission section... also launch REGEDT32 to look at the permissions on the
root of hives, especially HKLM... also look at the NTFS file permissions on
the Windows root folder. AFAIK those three things describe the most
important differences, and also allow you to change them.

"Chuck" <arcpublic@hotmail.com> wrote in message
news:000f01c2d910$040c3c10$a601280a@phx.gbl...
> Is there a resource out there somewhere that fully
> enumerates the differences between the Power Users and
> Users local groups under Win2k?
>
> We have a Terminal Server that we're trying to set up with
> reasonable security. One of our apps absolutely will not
> run properly unless user is a power user. We have done
> security auditing and cannot find any failed object access
> attempts (so it doesn't appear to be NTFS security
> related?).. The only thing that we have been able to do
> so far to get app to run is escalate user to power user or
> local admin.. We _really_ don't want to go that route. So
> I'm trying to look at differences in users / power users
> in detail to see what's going on here. Any help
> appreciated.
>
> Sorry to crosspost, don't know where this one goes..
>
> Thx, Chuck

Relevant Pages

  • Re: Running Programs with Elevated Privileges
    ... You could either try adding the domain users account to the local power users group ... on the domain computer where they need extra permissions or look into applying the ... compatws.inf template witch will give a user the same ntfs and registry permissions ...
    (microsoft.public.win2000.security)
  • RE: Client Permissions
    ... I checked user permissions on individual client ... For power users, they have been granted ... >> Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to change message store location in Outlook Express
    ... If you never had read/write permissions then how were your messages being saved ... to give Power Users full permission to make required changes. ... when I try to change the message store to an empty ...
    (microsoft.public.win2000.general)
  • Re: Sharepoint Security - Help!!!!!
    ... When they did the migration from one server to another it went from Standard ... differnt sharepoint document libraries that we have in our internal company ... permissions as to who could look in them. ... "power users" when I deleted them from being a member of this sercurity group ...
    (microsoft.public.windows.server.sbs)
  • System permissions and printer forms - serious design flaw in Win2K security?
    ... Only power users and system administrators can create printer forms. ... local user account to have either power user or administrator rights ... Does anyone know how the various permissions implicit in group ...
    (microsoft.public.win2000.security)