Re: Issue in demoting users from Admin to Power Users

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 04/13/05 

Date: Tue, 12 Apr 2005 23:27:12 -0700

I have been looking at your post for a day, and am still
rather stumped, based on what is said.
The two things that have occurred to me are:
1. check the share level permissions on the network
    share to which you redirect My Documents
    (this would only affect the My Docs part of the issue)
2. check the ownership of the profile and its key files
    (like ntuser.dat) as I am assuming Administrators will
    have been set as Owner if these were first created while
    the account was a local admin.
Never-the-less, I do not see how these would give what
you are reporting. 

-- 
Roger Abell
Microsoft MVP (Windows  Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"scot welker" <scotwelker@discussions.microsoft.com> wrote in message
news:0D03F372-59C9-474D-8141-8FE51AA723B7@microsoft.com...
> I have found it necessary to remove local admin rights for users on their
W2K
> workstations.  We went through a conversion of sorts recently which
required
> them to be admin for that conversion.  Their network user names will not
be
> changing so I have demoted to Power User level and made sure the existing
> user profile under documents and settings is afforded full rights with
this
> same login name.  That way, I assume they will login with the same profile
> and get the same settings for desktop/office/outlook.  I have tested this
on
> a machine I setup for this purpose and all went fine.  I went to do a test
> with my first real user and it says she's using the same profile but
nothing
> carries over.  In fact, none of her network mapped drives or redirected My
> Documents folder contain anything.  We redirect the My Documents folder to
a
> folder on the net.  Am I missing a step I must do?  Since it says she's
> logged in with the same profile (verified by typing 'set' at command
prompt),
> what would cause everything including her network drives to not come back?
> In addition, why do her individual user settings/preferences not carry
over?
>
> Thanks in advance for your assistance

Relevant Pages

  • Roaming profiles and the Local Settings Folder
    ... We have a Win2k3 server based network. ... The problem that I am having seems to be associated withe the Local settings ... As I understand it, the Local Settings folder is part of a user's profile, ... However, it is my understanding that it is still part of the user's profile, ...
    (microsoft.public.windows.server.general)
  • Re: removed computer, add back, not on connectclient list
    ... same profile. ... administrator. ... and Settings (make sure you have the folder settings set to show all files ... So we removed the computer from the network ...
    (microsoft.public.windows.server.sbs)
  • Re: Logon Problems/XP Pro laptop/Win200 server w/ AD
    ... Under documents and settings there should be a folder with the same name as ... Log onto her computer as admin and rename it. ... her log in again and a new profile will be created. ... network and to the machine locally. ...
    (microsoft.public.win2000.active_directory)
  • Re: Cannot logon to "(local machine)"
    ... Guide to User Data and User Settings ... Each PC can operate without the network. ... > My Documents folder within the user's profile. ... > specified for individual user accounts, via Group Policy or a logon script. ...
    (microsoft.public.win2000.group_policy)
  • Re: removed computer, add back, not on connectclient list
    ... I deleted all the profiles except local Administrator ... This required authentication by the network admin, ... your method since it preserves the settings. ... >> same profile. ...
    (microsoft.public.windows.server.sbs)