Re: Changing process priorities of normal users

"Bert Sierra" <bsierra@xxxxxxxxxxxxxxxxxxx> wrote in message
news:bsierra-284AC8.09323517102006@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
We have a Windows 2000 Advanced Server and wish to be able to adjust the
process priorities of users without adding them to the Domain Admins
group. According to
<http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/core
/fned_ana_spmq.mspx?mfr=true>, by default only members of the Domain
Admins or Administrators groups can have their process priorities
changed.


Bert
We need to clear up that there is a difference between having their
processes'
priority changed, and allowing them to change the priority of processes.
The statement in the link you reference is saying that, unless someone has
altered the user right settings, then only Administrators and Domain Admins
have permission to change process priorities.
They can change the priorities of any processes (that the system does not
guard from having its priority mucked with). It does not matter whose
processes.
This is not saying something about specifically being able to change "their
process
priorities"


I tried to change the security policies to allow Everyone to have their
process priorities changed. I opened "Local Security Settings >
Security Settings > Local Policies > User Rights Assignment > Increase
Scheduling Priority" and added Everyone in addition to Administrators to

Notice, what you did is grant to Everyone the user right to change process
priorities - any processes. This did not do what you state you did.

have this right. I noticed, however, that in the "Effective Policy
Setting" indicator, Administrators are checked but Everyone is not.

Does this mean there is a domain-level policy in effect that is
overriding the local policy? If so, how do I go about accessing it and

Yes, it probably does mean that the setting is under the control of a
GPO that applies to the machine you are considering.

changing it? I am a domain admin -- though a newbie to domain
administration (my experience is mostly with Unix and Max OS X Server).
Some tips would be helpful.

Get GPMC (from links at
www.microsoft.com/gp
and install on an XP or W2k3 in the domain. With GPMC it is much
easier to visualize the GPOs involved and there is a section for resultant
policies that you will likely find of use in this situation.


I also tried restarting the server in question, but the local security
policies I had set didn't take effect.


OK, so now I need to ask.
What is it that you are attempting / wanting to do ?
For the most part people are best off letting the scheduling algroithms in
the OS manage the process priorities. If you are attempting to allow
a number of your users to alter process priorities then you may be looking
at a bad experience (most users cannot appreciate the impacts of doing so).

Roger


.