Re: XP Default user profile vs 2000

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 03/29/04 

Date: Mon, 29 Mar 2004 07:14:35 -0700

Normally, once joined to a domain, you will find the Domain Admins
group is a member of the machine local Administrators group.
Either this was adjusted in your image, or your account is not in the
Domain Admins group but only the domain-level Administrators group. 

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"jatremillo" <jtz0mbie@yahoo.com, jatremillo@saws.org> wrote in message
news:E802318D-3574-47E0-B461-4B4CA9C06331@microsoft.com...
> I have created a new image for some tablet pcs using Windows XP Tablet
Edition 2002.  I have also created a custom Default User (Restricted user)
profile using Article 319974 in the MKB for anyone that uses this laptop.
We are all on a W2K domain and the majority of the users are all under a
User profile on the W2K domain.  Now the problem that I have is, that when
users that have administrative priveledges on the domain do not have
administrative priveledges on the local machine when they log on.  The
custom default profile is created properly but the domain rights do not
override the local machine rights.  Example:  I can log on to any machine in
the company with my own profile (I have admin rights) and install, use
regedit, whatever I need to do to work on W2K.  But on this machine, I can't
do anything but log on and just do retricted user things.  I figured that
the same admin rights that I have on the domain would automatically override
the default user settings for my type of profile.  Is there any additional
steps that I have to do to make this work properly.

Relevant Pages

  • Re: Encoder.PrepareToEncode gives Unspecified Error
    ... Inbuilt User "Network Service" added to administrators group on the server ... Service) has limited permissions to access files. ... more line for log to know the executing user and it is "Network Servicces". ... Create instance of profile ...
    (microsoft.public.windowsmedia.encoder)
  • Re: Listing user privileges
    ... So the service works is Domain Admin, running on a member, ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... confirmed) that being a member of the Administrators group for the domain ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: Repost: GP is ignored, users settings vanish
    ... Check the NTFS permissions on the master of their roaming ... profile due to a grant to Administrators and/or Domain Admins. ... > Also the group policy doesn't apply... ...
    (microsoft.public.windows.group_policy)
  • Re: Encoder.PrepareToEncode gives Unspecified Error
    ... Service) has limited permissions to access files. ... more line for log to know the executing user and it is "Network Servicces". ... Adding this inbuilt user to Administrators group makes encoding work ... Create instance of profile ...
    (microsoft.public.windowsmedia.encoder)
  • Re: Listing user privileges
    ... that Domain Admins (therefore AD controller ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)