Re: Effective Rights

From: Pat (htech_at_hotmail.com)
Date: 01/30/04

  • Next message: Brian Cook: "Unlimited Joining of computer to a Domain" 
    Date: Fri, 30 Jan 2004 11:51:12 -0500

    Keith,
    I notice a normal user account can remote manage me server, they are
    part of the usersdomanin users grp and our group policy group. What
    might I look at to see where they are picking up the rights to do
    this. I looked in the security tab of the domain users and
    Administrator and domain admins are there, if I create a new user the
    same security is applied. is this normal?
    On Fri, 30 Jan 2004 11:06:00 -0500, "Keith W. McCammon" <km@km.com>
    wrote:

    >Do you want to determine rights for a user, or for a computer? You need to
    >make that determination first.
    >
    >There are a few resource kit tools that allow you to view group membership
    >and group policy results:
    >
    >global.exe
    >gpresult.exe
    >perms.exe
    >
    >Some of this can also be done with cacls and xcacls.
    >
    >"Pat" <htech@hotmail.com> wrote in message
    >news:khrk105elqnqma6tspt3t26bt7uih58ak6@4ax.com...
    >> is there a command line option to run on a user workstation to find
    >> out thier effective rights on our domain?
    >

  • Next message: Brian Cook: "Unlimited Joining of computer to a Domain"

    Relevant Pages

    • Re: Need help configuring security on a stand alone terminal serve
      ... They allow you to set group policy settings that *only* ... Right-click on the GroupPolicy folder and choose Properties ... On the Security tab, ... check Full Control under the Deny column ...
      (microsoft.public.windows.terminal_services)
    • Re: Need help configuring security on a stand alone terminal server.
      ... They allow you to set group policy settings that *only* ... Right-click on the GroupPolicy folder and choose Properties ... On the Security tab, ...
      (microsoft.public.windows.terminal_services)
    • Re: Need help configuring security on a stand alone terminal server.
      ... They allow you to set group policy settings that *only* ... They will *not* allow you to edit some ... On the Security tab, ...
      (microsoft.public.windows.terminal_services)
    • Re: Security Tab no longer showing
      ... > it is normal behavior that has not security tab. ... There are settings like Simple File Sharing or Group Policy that prevent ... > Microsoft CSS Online Newsgroup Support ... you may want to contact Microsoft CSS directly. ...
      (microsoft.public.windows.server.sbs)
    • RE: Security Dialog Box
      ... In the Group Policy editor, I have made the change in User ... In the Security tab, highlight "Local intranet", click Sites button. ... In the Security tab, highlight "Trust sites", click Sites button. ... Click Close and reboot the server. ...
      (microsoft.public.windowsxp.general)