Re: allowing limited users to install software

From: branac (branislav.karic_at_gmail.com)
Date: 01/21/05 

Date: 21 Jan 2005 12:50:23 -0800

Power Users can do these things:
1. Create local user accounts (they can create user accounts in
Power Users and Users groups but not in Administrators group)
2. Modify user accounts which they have created
3. Change user permissions on users, power users, and guests
4. Install and run applications that do not affect the operating
system
5. Customize settings and resources on the Control Panel, such as
Printers, Date/Time, and Power Options

Power Users cannot:
1. Access other users' data without permission (they can not take
ownership of a file unless that permission is specificaly granted to
them, Administrators can take ownership of any file on the computer
anytime they like)
2. Delete or modify user accounts they did not create

So if you have files under an Administrator account, Power User can not
touch them and can not find any way around.

Relevant Pages

  • Re: User rights assignment in XP Pro
    ... > So why not use the MMC to get true control of the user accounts? ... Now it says Fred is a member of "Power Users". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: add user in more than one group through user accounts in control panel
    ... when i noticed in user accounts it taken that name as a domain user and ... net localgroup "power users" MarkBouch /add ... net localgroup Debuggers MarkBouch /add ... the power users group and Debuggers group in that pc. ...
    (microsoft.public.windowsxp.general)
  • Re: Stop users changing my password
    ... Locate the user accounts you wish to modify and open ... Type 'Power Users' in the 'Enter the object names to ... Power Users have the ability to install programs so this ... >>ability to be an administrator and this means being ...
    (microsoft.public.windowsxp.security_admin)
  • Re: restrictions
    ... You can assign them in the Power Users group. ... Modify user accounts which they have created ... If I set them as admin ...
    (microsoft.public.windowsxp.general)
  • Re: Windows XP Security and NT Domain
    ... Another thing the domain users are able to do is to delete ... they can go into User Accounts ... >>the local Administrators or more likely Power Users ...
    (microsoft.public.windowsxp.security_admin)