Re: Effective Rights

From: Pat (htech_at_hotmail.com)
Date: 01/30/04 

Date: Fri, 30 Jan 2004 14:41:29 -0500

no exactly, what I meant is all my users are part ot the domain users
group. in the user properties under security are the Administrators
and domain admin groups, along with, Enterprise Admin. etc. I notice
with a new user, I can go to a desktop and connect to a server to with
computer management in mmc. what rights would be giving this to the
user.

On Fri, 30 Jan 2004 14:24:43 -0500, "Keith W. McCammon" <km@km.com>
wrote:

>So your domain users are members of the domain admin group? If that's what
>you're describing that is highly unusual.
>
>"Pat" <htech@hotmail.com> wrote in message
>news:0m2l10hsrc4h7eq58je55vcu3d21quh6dg@4ax.com...
>> Keith,
>> I notice a normal user account can remote manage me server, they are
>> part of the usersdomanin users grp and our group policy group. What
>> might I look at to see where they are picking up the rights to do
>> this. I looked in the security tab of the domain users and
>> Administrator and domain admins are there, if I create a new user the
>> same security is applied. is this normal?
>> On Fri, 30 Jan 2004 11:06:00 -0500, "Keith W. McCammon" <km@km.com>
>> wrote:
>>
>> >Do you want to determine rights for a user, or for a computer? You need
>to
>> >make that determination first.
>> >
>> >There are a few resource kit tools that allow you to view group
>membership
>> >and group policy results:
>> >
>> >global.exe
>> >gpresult.exe
>> >perms.exe
>> >
>> >Some of this can also be done with cacls and xcacls.
>> >
>> >"Pat" <htech@hotmail.com> wrote in message
>> >news:khrk105elqnqma6tspt3t26bt7uih58ak6@4ax.com...
>> >> is there a command line option to run on a user workstation to find
>> >> out thier effective rights on our domain?
>> >
>>
>

Relevant Pages

  • Re: permission/security issues
    ... If you talk about domain users, also the Administrator is a domain user, so you kicked off yourself. ... Hopefully you have a recent backup then just rename the top level folder and restore the backup. ... Try with the advanced tab under security to take ownership of the folder and reset the permissions after that. ... except the user with the home settings. ...
    (microsoft.public.windows.file_system)
  • Re: Domain Users Privileges
    ... RMouse on the folder that is shared and pick "Sharing and Security". ... > By default the domain users only have Read-only access on ... > config in the local policies that the domain user can have ...
    (microsoft.public.security)
  • Re: let user change permission on his home-folder
    ... your script presumes that standard "domain users" have full permission ... acl instead of replacing it. ... folder and you should not be having any problem. ... perhaps there is a permission or security issue with your ...
    (microsoft.public.scripting.vbscript)
  • Re: error after applying dynamic security
    ... If I add my user to the "Administrators; domain admins or OLAP Admin" ... but under the "Domain users" group, the security doesn't works. ... I think there is a lack of authorization for the "Domain users" group, ... > cubes to my other cubes ...
    (microsoft.public.sqlserver.olap)
  • Re: Permission Denied When Accessing COM+ Component as Plain Domain User on 2003
    ... If your W2k3 is now at SP1, have you reviewed the SP1 release ... Microsoft MVP (Windows Security) ... > - The workstations and the server are a part of an Active Directory set ... > In the event log I've got authentication sucesses for the domain users ...
    (microsoft.public.win2000.security)