Re: Heddin shares restrections

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 08:08:54 -0400

Maged N. Roshdy wrote:
> i moved the users to the local power users group but they
> cant modify the regional options , how can i give that
> permission to the pwer users group

Not sure what you're actually trying to allow - what specifically, and
again, why?

> another question , why some programs installed with the
> power users level and some other programs deny that and
> requier administration permission.

I personally don't like users installing any software and don't generally
put them even in PowerUsers. But to answer your question, it depends on the
software itself - and what it requires permissions for in order to be
installed.
>
> discussing that with you was really usefull for me . thank
> you for giving me that chance

No problem - hope this helps.
>
> Maged
>> -----Original Message-----
>> anonymous@discussions.microsoft.com wrote:
>>> ok but i want to keep the users administrators on thier
>>> workstations
>>
>> Why? Do you have (badly written) software that requires this?
>>
>>> i just dont like them to affect the
>>> administrator tools of the domain like the securety and
>>> the hidden shares , so is there a customize solution can
>>> do that .
>>
>> If regular user rights don't work because you have software that
>> won't run that way, try putting them in Power Users instead of
> local admins to see if
>> they can still run the software.
>>
>>>
>>> Maged
>>>> -----Original Message-----
>>>> Maged N. Roshdy wrote:
>>>>> Hi
>>>>> at work i have Win2000 domain , i am the
> administrator of
>>>>> it , some day when i try to access the C$ drive one one
>>>>> workstation it gives me message sys windows cannot find
>>>>> the drive check the spelling and try again or tey
>>>>> searching , i know that the user of that workstation had
>>>>> unshared his C$ drive , but i am the administrator on that
>>>>> network i want too do scan for his machine or backup his
>>>>> files , so i need the C hard drive to have always the
>>>>> heddin share C$, to be able at any time to have
> access for
>>>>> it , so how can i make restriction for unsharing the
>>>>> hidden shared drives .
>>>>
>>>> Take all end users out of the local admins group.
>>>>
>>>> Also - since you have a domain, you really ought to have everyone
>>>> store ALL their data on the server - use folder redirection to move
>>>> My Documents to their home directories, etc. Workstation backups
>>>> are a pain and aren't very reliable.
>>>>>
>>>>> another question , if i want to close just the access to
>>>>> the GPEDIT.MSC , because i dont like any body to play with
>>>>> it , and how to make the policy of the domain that
> if any
>>>>> clint delete the domain administrator from his local
>>>>> administrators to not access the domain resources .
>>>>
>>>> Again, take the end users out of the local admin group and they
>>>> can't do this.
>>>>>
>>>>> please for any body know about thease matters to
> share me
>>>>> his knowledge and i'll appriciate so much
>>>>>
>>>>> Thanks
>>>>>
>>>>> Maged
>>>>
>>>>
>>>> .
>>
>>
>> .

Relevant Pages

  • Re: Heddin shares restrections
    ... i moved the users to the local power users group but they ... requier administration permission. ... >> administrator tools of the domain like the securety and ...
    (microsoft.public.win2000.security)
  • Re: Heddin shares restrections
    ... in the case of the power users i cant see all the tabs of ... the regional settings options, i appreciate your opinion ... some users need to install some ... the permission is Adobe acrobat reader. ...
    (microsoft.public.win2000.security)
  • Re: User Account Privileges
    ... Power Users group. ... >>I all depends on what the "extra" privs are. ... >>lines other than the Administrators, Power Users, ... >>accounts are usually coded so that these can only ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Best way to give local admin rights only across the domain
    ... afraid that will give them admin rights on the domain. ... Choose new group, browse to the domains' Local Power Users Group and add it to the local XP machine's groups, and choose Power Users ... browse to the ldomain's Local Admin Users Group and add it to the local XP machine's groups and choose Administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Permit "Create Shared Folders" to a non Local administrator or Power User
    ... I find we cannot let an account in Users group ... I think you can add your users to the Power Users group and restrict the ... ensure that we are continuously developing Microsoft products to meet ... >I want my users to be able to share folders without beeing able to install ...
    (microsoft.public.win2000.security)