Re: local rights when logging into a domain

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 10/24/03


Date: Thu, 23 Oct 2003 23:53:04 -0700

I agree entirely, for Office the domain account does not
need to be a member of the local Administrators group.
Older versions of Office required that an Office suite
application (like Word) be started once by an admin,
any admin, after it was first installed. Thereafter the
per-user mini-setups can run without admin privileges.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:%23tvctRWmDHA.3316@tk2msftngp13.phx.gbl...
> If you add their domain account to the local admin group, they'll have
local
> admin permissions on that machine. However, why do you need to do this?
> Install Office fully with an admin account, and it should run fine even
> without the user having admin rights. If that doesn't work, temporarily
> grant them local admin rights, run Office once, and then take the rights
> away and test.
>
>
> Eric wrote:
> > How difficult is it to configure a user to have rights to
> > modify the registry when logging into a domain? If I
> > create a user and give them Administrator rights to the
> > local PC, everything works fine(i.e. let MS Office made
> > registry changes).  But once they log into the domain,
> > they bypass the local user account......whats a quick fix.
> >
> > Thanks
>
>


Relevant Pages

  • Re: Installing software on local machine
    ... > rights to install software? ... > admin rights and installed the application but when the ... > I don't want to give them domain admin rights. ... You can put the domain user in the local administrators group on the local ...
    (microsoft.public.win2000.security)
  • Re: local rights when logging into a domain
    ... If you add their domain account to the local admin group, ... without the user having admin rights. ... > registry changes). ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Question about group
    ... It would mean that domain user can log on to any computer and get admin rights to ... adding the built-in role "INTERACTIVE" to the local Administrators group. ...
    (microsoft.public.win2000.security)
  • Re: Should I still buy SBS 2003 Premium w/ ISA in light of XP SP2s ICF2?
    ... Admin rights is a very simple story. ... relying upon the firewall to block accordingly the access to workstations, ... don't have the same level of packet-filtering in your favor that ISA ...
    (microsoft.public.windows.server.sbs)
  • RE: Impact of removing administrative rights in an enterprise running XP
    ... While it is true that you can push out patches and software via group ... reporting mechanisms for software/patch installations whatsoever. ... Quite often, the admin rights are ...
    (Focus-Microsoft)