Re: Change from Administrator to Power user
- From: "Juan" <soyquiensoy@xxxxxxxxx>
- Date: Fri, 13 Jan 2006 20:44:51 -0800
You could configure security permissions to reduce the administrative group
accounts down to the power user group level instead of changing the
administrative accounts to the power user group. see in any folder's
security that the default permissions for the power user group are checked
on three boxes only, so uncheck the admistrative group permissions to that
level.
Tip: In Folder Properties\Security\Advanced Options\Permissions\Modify\ and
check 2nd, 3rd, 4th, 5th and 12th boxes, check box to apply the same
permissions to objects and containers within the folder, apply and accept.
That will make the administrative group have the same permissions than those
of the power users. You may also modify the security policies so they can
not take ownership and be able to modify permissions, do it in
Start\Run\secpol.msc\Security Settings\Local directives\User Rights
Assignment\Take Ownership of Files or other objects\remove administrators.
How to set, view, change, or remove special permissions for files and
folders in Windows XP
http://support.microsoft.com/kb/308419/en-us
How to set, view, change, or remove file and folder permissions in Windows
XP
http://support.microsoft.com/kb/308418/en-us
---------------------------------
"Oiprox" <aev@xxxxxxxxxxx> escribió en el mensaje
news:89F2998E-44C6-46AA-898C-E7C9EEE79D21@xxxxxxxxxxxxxxxx
> I forgot to say that the user and the workstation are part of a domain, so
i
> cannot create another user account so easily. Moreover i must mention that
I
> have to change rights not of one user but of 30 in a short time. Some of
them
> have outlook base up to 4 Gb - so the process of migrating data will take
too
> much time.
> Sometimes I change permissions to registry branches for the user to full
> control and make him the owner of the folder with his accont settings in
Docs
> and settings and it works but sometimes it doesn't! And I cannot guarantee
> the user that in the future he will have no problem because of it.
> --
> Best regards,
> Oiprox
>
>
> "Juan" wrote:
>
> > "Jesper Johansson" [MSFT] said:
> >
> > > Why do you need to change a user from administrator to Power User? It
buys
> > you almost nothing from a security perspective.
> > Your statement conflicts with many MVPs but coming directly from
Microsoft I
> > don't doubt you are correct, but still I'd be interested to know the
facts.
> >
> > > A Power User is just an administrator that has not made himself an
> > administrator yet. If anything you need to change it to a regular user.
> > I didn't know that a power user could make himself an administrator,
would
> > you care to elaborate.
> >
> > > More than likely the creator/owner on the user's profile is listed as
> > "Administrators" not the user account.
> > That can easily easily be changed.
> >
> > > The Files and Settings Transfer Wizard is the easiest way "to more the
> > profile".
> > (?) You lost me here. I'd be interested to know your meaning; any tip
is a
> > good tip specially coming directly from Microsoft.
> >
> > And I responded to the OP request with what seems to me the most
practical
> > approach and because I believe it's best to have more than one
> > administrative account, and I didn't mention it but seems obvious he
should
> > leave the administrative account as it is and instead of converting it
to
> > power or regular user, he should instead create a new account, and the
File
> > and settings wizard seems to me the most practical approach to transfer
> > files and settings to the new account without modifying the
administrative
> > account.. but that's just my point of view of course and just a
suggestion.
> >
> > > > --------------------------------
> > > > "Oiprox" <aev@xxxxxxxxxxx> escribió en el mensaje
> > > > news:35FF2481-16E8-4634-B82F-7C4E8C8FEF34@xxxxxxxxxxxxxxxx
> > > >>
> > > >> Hello Everyone!
> > > >> I need to change a user rights from Administrator to Power user but
> > when
> > > >> I
> > > >> do it - the system after logging off and On says that it cannot
access
> > > >> the
> > > >> Desktop folder - and the best part of user settings get corrupted!
> > > >> When I return the rights of Administrator - everything is OK!
> > > >> What is the best and 100% way of changing rights from Admin to PU?
> > > >> --
> > > >> Best regards,
> > > >> Oiprox
> > > >
> > > >
> > > >
> > > >
> > >
> > >
> >
> >
> >
> >
.
- References:
- Re: Chenge from Administrator to Power user
- From: Juan
- Re: Chenge from Administrator to Power user
- From: Jesper [MSFT]
- Re: Chenge from Administrator to Power user
- From: Juan
- Re: Change from Administrator to Power user
- From: Oiprox
- Re: Chenge from Administrator to Power user
- Prev by Date: Re: administrator account security risk
- Next by Date: Re: administrator account security risk
- Previous by thread: Re: Change from Administrator to Power user
- Next by thread: Re: Symantec Nav Corp 9.X and Windows XP firewall...
- Index(es):
Relevant Pages
|
