Re: Windows2000 Domain - Security on Local Machine.

From: Marina Roos (marina_at_roos.nospam.nl.com)
Date: 06/19/03


Date: Thu, 19 Jun 2003 00:00:29 GMT


Making a user member of the local Administrators-group doesn't give him/her
administratorrights on the domain. So no problem here.

Marina

"Nick Coons" <ncoons@red7usa.com> schreef in bericht
news:6d2521aa.0306181337.435d73ec@posting.google.com...
> Hello!
>
> I have a network setup with a Windows2000 Domain Controller and
> approximately 20 workstations, some running Win2000 Pro and some
> running WinXP Pro. The problem is that almost every user, if not
> every user, has to be able to install software and patches (anti-virus
> definition updates, browser plug-ins, etc).
>
> The problem is that none of these pieces of software, from what I've
> been able to see so far, will not install unless the person installing
> the software is logged in as an Administrator.
>
> I've tried re-assigning rights to the Users group. In fact, I've
> assigned every right that the Administrators group has to the Users
> group (at least, every one that I could find), and it doesn't allow
> the user to install software. If I drop the user into the
> Administrators group, that works fine.
>
> So I'd like to know what I'm missing. I'd like to be able to figure
> out what it is that allows the Administrators group the ability to
> install software, so I can assign that same right, or set of rights,
> to the Users group.. so I don't have to give every user full
> Administrative rights.
>
> Any help would be appreciated!
>
> - Nick



Relevant Pages

  • Re: System Admin - Tomasz
    ... Delegation of rights allows a user or group to manipulate objects in the ... To be able to properly install software, he would need to be a member of the ... local administrators group at any machine on which you want him to be able ... You do not have to make him a domain admin for this. ...
    (microsoft.public.win2000.active_directory)
  • Re: administrator on box also on domain?
    ... > administrators group at the PC then it shows something like: ... > domain_name\Domain Admins ... so we add the user to the local Administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: User rights
    ... This issue is with SBS automatically pulling the local user account into ... Will it still migrate that user up to SBS? ... are automatically Sharepoint Administrators. ... > to remove the Power Users group from the Sharepoint Administrators group. ...
    (microsoft.public.windows.server.sbs)
  • Odd behaviour with user accounts (accounts "hidden")
    ... installation), dad and kids. ... "Administrators" group. ... As soon as I remove "kids" from the administrators group the account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Confused
    ... Administrators group so they are administrators of the child domain, ... By default the Domain Admins of a domain are member of the ...
    (microsoft.public.win2000.active_directory)