Re: User rights assignment in XP Pro

From: Simon Pleasants (plesbit_at_hotmail.com)
Date: 03/12/04 

Date: Fri, 12 Mar 2004 14:33:37 +0000

On Thu, 11 Mar 2004 21:20:20 -0700, "Bruce Chambers"
<bchambers@nospamcableone.net> wrote:

>Greetings --
>
> So why not use the MMC to get true control of the user accounts?
>Right-click My Computer and select Manage.
>
>Bruce Chambers

This is exactly what I HAVE been using. Perhaps I am not making
myself clear so I will try to be very specific.

e.g. Fred is an office worker. He needs to be able to use all
standard items of office software, create and manage the relevent
files and alter those created by other users of the machine. He does
not need to be able to open administrator controls, change other
peoples' passwords, remove programs etc.

1. I right click on my computer and select "manage", opening the
management console.
2. I right click on "users" and select "new user". I fill in Fred's
particular's, set his password and click create.
3. I go to Fred's name in the user list, click on the "members of"
tab and see that Fred is only a member of the "users" group. I click
"add" and type in "Power Users". I click "check names", and it brings
up "IT1\Power Users" (IT1 being the machine name). I click "okay".
Now it says Fred is a member of "Power Users".
4. I go to "Groups". I right click "power users" and it lists Fred
as a member of this group.
5. Fred tries to use his account, but it does not give him the rights
of a power user, it restricts him to things that only limited users
can do, and this is makes it impossible for him to use the computer as
he needs.

What have I done wrong? In NT and 2k this would have worked. In XP
Pro it does not. It does not matter what groups I assign Fred or his
colleagues to, they are ALL treated as limited users. How do I get
the computer to honour the rights that Fred SHOULD have as a power
user?

Relevant Pages

  • Re: Power User Setting Not Saved
    ... when I say "local user" I mean the login name that is typically used ... user that is a member of that OU then be a Power User? ... There are two ways to do Restricted Groups - members of this group or this ... membership of the Restricted Group [power users in your case] will be ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Login
    ... the domain group called Domain Users is a member of the local Users group on all computers; this is usually why any domain user can logon at any domin member computer. ... Policies, User Rights Assignment, Deny log on locally - add the group containing the "email only" user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Disabling sharing tab in client systems
    ... removing them from the power users or administrators group and making sure ... that they are only regular users. ... member of a domain group that is a member of the local administrators or ... power users group on his computer. ...
    (microsoft.public.windows.server.security)
  • Re: Security in hosted environment
    ... to utilize user groups to go together with the user accounts. ... > All member sites are in a folder called members, ... > write permissions in the member folders and nowhere else, ... > like for example the SaveAs in ADODB.Recordset or the ServerXML objects ...
    (microsoft.public.inetserver.iis.security)
  • Re: adding power user rights when computer is in a workgroup
    ... a KB article 2 years ago which listed a registry edit to add the Power User ... been member of a domain, Power User would have displayed as the Standard User ... of a workgroup and not of a domain, there is no "Power users" group to make ... the Power Users group when in a workgroup setting. ...
    (microsoft.public.windowsxp.general)