Re: Limit administrators permissions

From: Danny Sanders (Danny.Sanders_at_NO-SPAMcpcmed.org)
Date: 12/02/04 

Date: Thu, 2 Dec 2004 11:58:01 -0700

> Remove the administrators group from the documents and settings folder
> permissions.

This would not be a solution if it did work, they could just add themselves
back. The problem is with the bad application that forces you to put users
in the admin group not the OS.

hth
DDS W 2k MVP MCSE

"Evan" <Evan@discussions.microsoft.com> wrote in message
news:62F30CB1-3332-4B58-9575-7CE58A8BD153@microsoft.com...
> We had then onsite. It can't be done.
>
> All I want to do is remove the administrators group's ability to view
> everyones profile in documents and settings. The rest of the workstation
we
> are locking down with AD group policies.
>
> Here's my thinking:
>
> Remove the administrators group from the documents and settings folder
> permissions.
> Add authenticated users and then change the permissions so that domain
users
> can login, their profile get's created and they can see their own docs
ands
> stuff but cannot access everyone elses.
>
>
>
>
> "Danny Sanders" wrote:
>
> > > One of the main applications that we have on the XP SP2
> > > image is Hummingbird DM 5 and it needs the user to be
> > > local admin, otherwise it does not install the Office
> > > 2003 integration bits.
> >
> >
> > I'm not the least bit familiar with Hummingbird 5, but from the above
> > statement I wonder if one could set the user up as admin for the install
and
> > first run of the app, then remove the user form the admin group. Would
the
> > program run fine for them then? Or does the Office part get installed
each
> > time the program starts?
> >
> > If not I think your best bet would be to contact the maker of the app.
There
> > is not much you can do to lock down the admin of the computer.
> >
> > hth
> > DDS W 2k MVP MCSE
> >
> > "Evan" <anonymous@discussions.microsoft.com> wrote in message
> > news:09e001c4d897$addefd30$a601280a@phx.gbl...
> > > One of the main applications that we have on the XP SP2
> > > image is Hummingbird DM 5 and it needs the user to be
> > > local admin, otherwise it does not install the Office
> > > 2003 integration bits. It writes to HKLM etc etc. Bad app
> > > but we have no choice. So that's why we need users to have
> > > local administrator access. Believe me, we tried have it
> > > the other way but it delayed our project to much.
> > >
> > > I would expect users not to know how to give themselve the
> > > rights again. So if you have any ideas on how to do it I
> > > would greatly appreciate them.
> > >
> > > Thanks
> > > Evan
> > >
> > > >-----Original Message-----
> > > >Not sure you can. Anything you do to lock them down would
> > > have to be done as
> > > >administrator. They have administrator rights to the
> > > computer and they can
> > > >reverse what ever you just did.
> > > >
> > > >You might try this link to see if the app will work when
> > > logged in as a user
> > > >instead of admin:
> > > >http://www.microsoft.com/windowsxp/using/helpandsupport/le
> > > arnmore/tips/danie
> > > >ls1.mspx
> > > >
> > > >You might also see if they make a version compatible with
> > > XP.
> > > >
> > > >
> > > >hth
> > > >DDS W 2k MVP MCSE
> > > >
> > > >"Evan" <anonymous@discussions.microsoft.com> wrote in
> > > message
> > > >news:081b01c4d887$b37d89b0$a301280a@phx.gbl...
> > > >> Hi,
> > > >>
> > > >> In our company all users on XP are local administrators
> > > on
> > > >> their workstations to allow all the legacy apps to
> > > >> function.
> > > >>
> > > >> I would like to restrict the administrators group rights
> > > >> on the workstation and more importantly prevent users
> > > from
> > > >> accessing other users local profiles in Documents and
> > > >> Settings. How would I go about doing that?
> > > >>
> > > >> Any help would be greatly appreciated.
> > > >>
> > > >> Thanks.
> > > >> Evan
> > > >
> > > >
> > > >.
> > > >
> >
> >
> >

Relevant Pages

  • Re: Limit administrators permissions
    ... >> Remove the administrators group from the documents and settings folder ... >> permissions. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Scheduled tasks in Server 2003 do not run
    ... have just added the user to the local Backup Operators ... I've even gone so far as to reset the permissions ... > Administrators group the task would not run, ... > be able to logon as batch job). ...
    (microsoft.public.windows.server.general)
  • Re: Encoder.PrepareToEncode gives Unspecified Error
    ... Inbuilt User "Network Service" added to administrators group on the server ... Service) has limited permissions to access files. ... more line for log to know the executing user and it is "Network Servicces". ... Create instance of profile ...
    (microsoft.public.windowsmedia.encoder)
  • Re: Some users are unable to access a site in sharepoint
    ... permission levels or groups on the sharepoint site? ... bstrUrl, String& pbstrServerRelativeUrl, String& pbstrTitle, String& ... I know it is some type of permissions issue because if I adde one of the ... users account to the administrators group on the sharepoint web servers ...
    (microsoft.public.sharepoint.windowsservices)
  • Stop sharing Drive on Network
    ... Administrators group can access this share (known as C$, ... It is not recommended you modify the NTFS permissions on ... >you have to go into the security Tab and configure access ...
    (microsoft.public.windowsxp.general)