Re: Admin on computer but not network.

Create a Group on your domain, ie "LocalPowerUsers"
Go to a PC that you want give someone Power User rights.
Login as the local Administrator, or a Domain Admin.
Click Start, then right click on My Computer, and from the shortcut menu
choose "Manage".
Go to "System Tools\Local Users and Groups\Groups"
Open the Power Users group and click Add.
Make sure in the box that says "Select this object type" that is says "Users
and Groups". If it doesn't click on Object Type and check the box in front
of "Groups"
Make sure the From this location bix has your domain listed. If not click
the Locations button and select your domain under "Entire Directory".
In the Enter the object names to select, type "LocalPowerUsers" (without the
quotes).
You can click the buttom "Check Names" if you like to be sure you have typed
everything correctly and to ensure the PC can see your domain group.
You're all set. Now just add people to you domain group "LocalPowerUsers"
and the next time they log onto their PC then will have Power User rights.
I add a "LocalPowerUsers" and a "LocalAdminUsers" group to all the computers
on my network when I first set them up.

Who ever you make a memeber of your domain group automatically becomes a
member of the local group, because the Domain Group is a member of the Local
Group...

Hope this helps!

Kelvin



"Scott Burke" <ScottBurke@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:DE71D469-03D5-48FE-88BA-B6A93EC326AF@xxxxxxxxxxxxxxxx
Hi Kelvin,
Thanks for your reply. I like that ideal. I am lost on how
this would work.
1) I can controll the local rights with these groups?
2) do I add these groups to the user when I need to do somthing and then
remove the group when I am done?


PLease expline in more detail on how this ideal will work?


Thank you,
Scott Burke

"Kelvin" wrote:

Here is what I do to give users local right on their computer.

I create an Active Drirectory group for example called LocalAdmins and
LocalPowerUsers
I add these groups to the local groups "Administrators" and "PowerUsers"
respectivly.
This way I can control who has these rights from the netowrk and not have
to
make changes on the local computer.

Hope this helps

Kelvin


"Scott Burke" <ScottBurke@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:22B39A6D-DC16-4175-ACBA-B4DA0B8BC84A@xxxxxxxxxxxxxxxx
Shanen Stanley,
As everyone in the news groups know, an unknown issues for me could
easily
be common knowledge for someone else. That is one of the major POINTS
for
the news groups! If that is too difficult for you to grasp then please
follow this link:
http://www.catb.org/~esr/faqs/bit_me.html


The reason I kept the question vague is so no one will put themselves
in a
box while trying to answer it. If you want an example of what I am
trying
to
do then ask for an example, I would be happy to give you one.

Example: Our in house custom software, written by someone who does not
work
here anymore, has a problem with the monitor being turned off. It
has
no
problem with screen savers but when windows turns off the monitor there
is
a
50/50 chance that the program will crash. It is just a pain for me to
stop
what I am doing to run upstairs, have the user save their work, kick
them
off
their computer, login as me, then changed the power setting in windows,
log
off and have them(user) log back in.

In this case it would be nice to instruct them on how to change the
power
settings over the phone. They can't do that right now because of their
security settings!

My sugestion on making them Administrators is simple, I don't know of
any
other solution!

I would be happy to hear what other people have done and what kind of
success they have had. or not...


Scott Burke

"Shenan Stanley" wrote:

Scott Burke wrote:
I want each user to be an administrator on there own computer but
not on the network. the reason is that they need to beable to
installl software and change computer setting anyway they
want/need. This is a magament requirment. They are NOT
administrators on the server.

can that be done?

Yes.

What unknow problems will it cause?

Unknown problems? No one knows - thus why they are unknown.

Known issues - they will likely infest/infect their own machines and
not
be
able to clean them; they will be more vulnerable to all sorts of
attacks;
it
is a security risk for your overall network; etc...

if yes, What about VISTA?

What about it?

Thank You
Scott Burke

NP.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html








.

Loading