Re: Power User Account corrupted?



Are you sure these programs do not need you to be a local administrator?
What error message does the user get? Have you confirmed that the programs
can be installed by a user that is a power user [and not also a local
administrator] on another computer.

If other power users that are not also local administrators can install them
I would start by verifying her group membership using the command net user
username. If it still does not work make sure that she is not a member of
any group that has deny permissions to folders where the application would
be installed and that power users on her computer has the same permissions
to folders as powers users on the computers where it works. In a default
installation power users also have write/modify permissions to the program
files, documents and settings\all users, and \windows folders. Any user by
default would have full control permissions to their user profile folder.
Also if Software Restriction Policies is enabled on the domain that can
prevent any user from installing an application and SRP events may be
recorded in the application log. You can run rsop.msc on her computer to see
the effective Group Policy settings for user and computer and what GPO is
applying a setting. --- Steve



"Courtney R" <CourtneyR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:AA137527-3BDF-40B3-A44E-B00B9B78FD19@xxxxxxxxxxxxxxxx
> Hi.
>
> We have a domain user here at our company, using a XP Pro machine. She
> has
> been setup on the machine as a power user. But whenever she tries to
> update
> programs, or install them, it always throws and error message. These
> programs do NOT need administrator rights to install. (such as Win Zip or
> Adobe Acrobat Reader, etc...)
>
> Its like her 'Power Users' setting has been corrupted, and now she is
> really
> just a general basic users account.
>
> Anyone have an idea.


.



Relevant Pages

  • Re: Question on software install and event log security
    ... There is no deny user right for manage auditing and security log but if the ... install all .msi packages even if the user is not a local administrator. ... >> local administrator could not change that user right via Local Security ... >>> local administrator group, therefore allowing all users to install ...
    (microsoft.public.windows.group_policy)
  • RE: Users and Groups
    ... Template of the Users and Computers Wizard. ... even Server assigned Apps applied via Users and Computers on SBS. ... but usually associated with inability to install ... Local Administrator. ...
    (microsoft.public.windows.server.sbs)
  • Re: Users vs. Power Users
    ... in article 05cb01c2d921$04be8c60$3301280a@phx.gbl, James Raaymakers MCSE at ... > Power Users can install software as long as the software ... > install software like this. ... > Power Users Group. ...
    (microsoft.public.win2000.security)
  • Re: What right allows full access?
    ... ACL to replace any anywhere in the substructure. ... the install drive has many places ... > I would not grant Full access to Power Users group if I could make a copy ... > and checked 'Replace permission entries on all child objects with entries ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Migrating sbs 2003 to sbs 2008
    ... solved some install issues...nothing difficult ... assigned new local user to local Administrator group ... When all 5 workstations were done, I disconnected my existing server ... Launch Outlook and import your PST file. ...
    (microsoft.public.windows.server.sbs)