User rights assignment in XP Pro

From: Simon Pleasants (plesbit_at_hotmail.com)
Date: 03/11/04 

Date: Thu, 11 Mar 2004 13:19:19 +0000

I am trying to assign different levels of priviledge to different
users on a Windows XP Pro machine. Unfortunately the only account
types are administrator or limited. The are no further options in the
users section of the control panel.

Limited accounts are utterly useless but admin accounts too powerful.
I am quite comfortable editing local security policy settings to
customise my own policy settings for each user group, and I am quite
comfortable using the management console to assign different users
membership of different groups. Unfortunately, XP does not recognise
the assigment of user groups and treats everyone less than an
administrator account as a (useless) limited user (even if they have
been added to the Power User group, amongst others).

On my Win2k Pro machine the assignment of policies is very accessible
and very easy - and it works.

What do I have to do to get XP to properly recognise the user groups
to which users are assigned and accord them the correct access and
control rights (in the same way as 2k or through the computer
management console)?

The machine in question is running XP Pro SP1 and is currently a stand
alone machine, but will be the central unit on a wireless network by
the end of this very week. The machines will all be members of a
common workgroup.

In addition I look after two small groups of networked computers in
common workgroups for a small charity. Currently all users have full
administrative rights on the networked machines. I am very
uncomfortable about this and would like to implement limitations as a
matter of some urgency. Any help very much appreciated.

Thanks
Simon

Relevant Pages

  • Re: Accessing domain printer from non-domain computer
    ... Try creating a local port on an XP Pro machine. ... it wouldnt let me install the printer. ... > Perhaps I needed to be an administrator to install a printer on a users ... > account to install the printer. ...
    (microsoft.public.win2000.active_directory)
  • Re: User rights assignment in XP Pro
    ... Unfortunately the only account ... > administrator account as a limited user (even if they have ... > been added to the Power User group, ... but will be the central unit on a wireless network by ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Question on new user setup
    ... Per user Group Policy Restrictions for XP Home and XP Pro ... There is an owner account that was setup by Gateway's install ... I decided to setup another user account which I setup as administrator. ...
    (microsoft.public.windows.mediacenter)
  • Administrator without administrative privileges
    ... When is use msconfig on my XP Pro machine to remove some of the start-up ... privileges and that I may need to log out and log in as an administrator. ... My account is an administrator's account, so I don't know what I can do to ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: How do I stop being Administrator?
    ... Just remove your account out if the Adminitrator's Group and leave it in the ... User Group. ... You trash the Administrator ... > After a changeover and a clean install of Win 2000, ...
    (microsoft.public.win2000.networking)