Re: Group assigned rights

From: Steven L Umbach (n9rou_at_attbi.com)
Date: 06/10/03 

Date: Tue, 10 Jun 2003 00:58:51 GMT

        In the security policy/user rights you can customize some rights,
but not many. For instance you could not allow guests or regular users to
change their tcp/ip configuration - you absolutely must be an administrator
[there are workarounds in some cases, but still administrator credentials
are required]. XP is providing more default groups to accomplish such tasks.
Just be careful giving guests additional rights and you probably want to put
their computers in a separate OU if you want to implement any user rights
changes. You certainly would not want those changes to show up on a critical
server, etc. --- Steve

"Disinfectant" <disinfectant@anonymous.com> wrote in message
news:#d9dkmpLDHA.1968@TK2MSFTNGP11.phx.gbl...
> Hi all!
>
> I was wondering... you know when you assign a user to a group and so that
> user is bound to the group's restrictions, how do you modify those
> restrictions?
> E.g.
> You have a user called "John" who is a member of the group "Domain
Guests".
> He would recieve guest user rights so he couldnt mess with system settings
> when logged on. Where do you define the settings that allow and disallow
> system access?
>
> I would like to create a group in our domain that allows domain guests to
> change system settings but still have the other restrictions in place.
>
> Kind Regards
> Disinfectant
>
>

Relevant Pages

  • RE: More on VMWare poor guest isolation design
    ... host always means owning the guests, but that isn't always the case, ... especially if you are not a full administrator on the host machine. ... Vista, if not already blocked, even as an administrator I would have to ... explicitly allow a worm to access the RAM or disk of a virtual machine. ...
    (Bugtraq)
  • Re: Cross-Teamsites-Shared Document Library
    ... As administrator I can add a ... correct method imo. ... the teamusers should have read & write access to the shared ... document library (and guests should only have read access). ...
    (microsoft.public.sharepoint.portalserver.development)
  • Re: IUSER added to Admin Group- Any issues?
    ... I think you can add a user which is in Users or Guests Group.You can ... delete your old directory access.Add this user and Administrator to it. ... MIKEDA Virtual Host. ... Support HTML+ASP+PHP ...
    (microsoft.public.inetserver.iis)
  • RE: Windows Explorer
    ... "Mike" wrote: ... > users but the administrator, if so how do i do this....I ... > haver noticed that guests can access windows explorer and ...
    (microsoft.public.windowsxp.basics)
  • Assigning Individual User Rights
    ... computer running XP different User Rights? ... to make it so that guests have no right to use the control ... When I go into the console it has the individual rights ...
    (microsoft.public.windowsxp.security_admin)
Quantcast