Re: Heddin shares restrections

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 07/27/04 

Date: Tue, 27 Jul 2004 08:08:54 -0400

Maged N. Roshdy wrote:
> i moved the users to the local power users group but they
> cant modify the regional options , how can i give that
> permission to the pwer users group

Not sure what you're actually trying to allow - what specifically, and
again, why?

> another question , why some programs installed with the
> power users level and some other programs deny that and
> requier administration permission.

I personally don't like users installing any software and don't generally
put them even in PowerUsers. But to answer your question, it depends on the
software itself - and what it requires permissions for in order to be
installed.
>
> discussing that with you was really usefull for me . thank
> you for giving me that chance

No problem - hope this helps.
>
> Maged
>> -----Original Message-----
>> anonymous@discussions.microsoft.com wrote:
>>> ok but i want to keep the users administrators on thier
>>> workstations
>>
>> Why? Do you have (badly written) software that requires this?
>>
>>> i just dont like them to affect the
>>> administrator tools of the domain like the securety and
>>> the hidden shares , so is there a customize solution can
>>> do that .
>>
>> If regular user rights don't work because you have software that
>> won't run that way, try putting them in Power Users instead of
> local admins to see if
>> they can still run the software.
>>
>>>
>>> Maged
>>>> -----Original Message-----
>>>> Maged N. Roshdy wrote:
>>>>> Hi
>>>>> at work i have Win2000 domain , i am the
> administrator of
>>>>> it , some day when i try to access the C$ drive one one
>>>>> workstation it gives me message sys windows cannot find
>>>>> the drive check the spelling and try again or tey
>>>>> searching , i know that the user of that workstation had
>>>>> unshared his C$ drive , but i am the administrator on that
>>>>> network i want too do scan for his machine or backup his
>>>>> files , so i need the C hard drive to have always the
>>>>> heddin share C$, to be able at any time to have
> access for
>>>>> it , so how can i make restriction for unsharing the
>>>>> hidden shared drives .
>>>>
>>>> Take all end users out of the local admins group.
>>>>
>>>> Also - since you have a domain, you really ought to have everyone
>>>> store ALL their data on the server - use folder redirection to move
>>>> My Documents to their home directories, etc. Workstation backups
>>>> are a pain and aren't very reliable.
>>>>>
>>>>> another question , if i want to close just the access to
>>>>> the GPEDIT.MSC , because i dont like any body to play with
>>>>> it , and how to make the policy of the domain that
> if any
>>>>> clint delete the domain administrator from his local
>>>>> administrators to not access the domain resources .
>>>>
>>>> Again, take the end users out of the local admin group and they
>>>> can't do this.
>>>>>
>>>>> please for any body know about thease matters to
> share me
>>>>> his knowledge and i'll appriciate so much
>>>>>
>>>>> Thanks
>>>>>
>>>>> Maged
>>>>
>>>>
>>>> .
>>
>>
>> .

Relevant Pages

  • Re: Heddin shares restrections
    ... i moved the users to the local power users group but they ... requier administration permission. ... >> administrator tools of the domain like the securety and ...
    (microsoft.public.win2000.security)
  • Re: Heddin shares restrections
    ... in the case of the power users i cant see all the tabs of ... the regional settings options, i appreciate your opinion ... some users need to install some ... the permission is Adobe acrobat reader. ...
    (microsoft.public.win2000.security)
  • Re: User Account Privileges
    ... Power Users group. ... >>I all depends on what the "extra" privs are. ... >>lines other than the Administrators, Power Users, ... >>accounts are usually coded so that these can only ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to change message store location in Outlook Express
    ... to give Power Users full permission to make required changes. ... when I try to change the message store to an empty ... Once I log off and change my group membership to the Administrators Gp ...
    (microsoft.public.win2000.general)
  • Re: Permit "Create Shared Folders" to a non Local administrator or Power User
    ... I find we cannot let an account in Users group ... I think you can add your users to the Power Users group and restrict the ... ensure that we are continuously developing Microsoft products to meet ... >I want my users to be able to share folders without beeing able to install ...
    (microsoft.public.win2000.security)