Power User in Win2k Pro/XP Pro/Terminal Server users

From: Mike Resnick [ms] (mikeres_at_online.microsoft.com)
Date: 07/28/03 

Date: Sun, 27 Jul 2003 20:47:34 -0700

Hi George,

actually instead of using a shotgun i would fine tune the
permissions via 2 utilities.

Regmon and filemon from sysinternals.com

Bot programs will provide output on what the applications
are touching so you can go and change the permissions on
the hives to allow the minimul access as possible.

However, be aware if they are needing to have full
controll over the windows directory or registry keys
thatare sensative i would reengage the author of the
software to make adjustments to a tighter security model.

Thanks
Mike Resnick
Directory Services

>-----Original Message-----
>I have an application that after installation, the only
>local user who can use it is one with Administrative
>rights or is a "Power User". But, if they are a simple
>user of the local machine, they cannot use the
application
>as they get errors. (This has been escalated to the
vendor
>of the application. We have part time employees that use
>the same Win2K Pro workstation and I do not feel
>comfortable giving them Power User authority as you
>probably understand why.)
>
>In XP, the "power user" distinction has gone away. Now, I
>am in a real pickle because, to use the app users
>need 'administrator' authority.
>
>1. Does anyone know how to create a local machine group
to
>replace "Power User"?
>
>2. Does anyone know how to create a Win2k Server group
>that has "Power User" authority so that I can provide
that
>same level to my Terminal server users who need to use
>this application?
>
>Thanks in advance....
>.
>

Relevant Pages

  • Re: solving the problem of spsearch
    ... the service to run if I put my service account into the local machine ... After a lot of tinkering with COM launch permissions (which didn't ... to get the search service to run without error. ...
    (microsoft.public.sharepoint.windowsservices)
  • "select Name,Path from Win32_Share" permissions required by ASP.NET to return paths,
    ... I'm tripping over ASP.NET local machine permissions with the following ... container for share=local path string pairs ... WqlObjectQuery objectQuery = new WqlObjectQuery ("select Name,Path from ...
    (microsoft.public.windows.vista.security)
  • Re: How can I Disable JIT Debugger for my builds?
    ... I'm not sure how much you know about .Net permissions but they are ... What you need to do is convince the newtork admins to grant your file share ... This FullTrust only affects the .Net security, ... > everything to the local machine and the DirectX builds worked immediately! ...
    (microsoft.public.win32.programmer.directx.managed)
  • Re: Cant set permissions
    ... >>to use a NTFS partition on one of them to back up data from the other. ... >>want to set permissions so that only the user of the PC doing the backup can ... >>unable to search anything other than the local machine. ...
    (microsoft.public.windowsxp.network_web)