RE: Windows Media Player and Restricted User Accounts
- From: "gtappert" <gtappert@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 20 Jun 2005 16:22:03 -0700
Don't know if the Power User question is still an issue for you, but here is
the workaround we came up with...
Problem Summary: Windows 2003 automatically adds Domain Admins and Domain
Users to the local Windows XP Administrators and Users groups
(respectitvely). Windows 2003 eliminates the Domain Power Users group,
however, so there is no provision to automatically give any number of domain
users Power User privilege on computers joined to the domain. (Microsoft
professes that this is to improve security...although it may result in more
people running admin privilege to gain access to needed functionality!)
Workaround:
1. Create a group called Power Users in the Users container in AD. (In our
case, we wanted to make sure that Power Users did not get any special GPO's
applied to help isolate the effect of Power User privilege from other
settings, thus the selection of the Users container.)
2. Add the newly-created DOMAIN\Power Users group to the local Power Users
group on each Windows XP machine. (We use Symantec Ghost with Sysprep for
imaging. To save time, we simply did this on the base image before we
reimaged. When the image isn't joined to the domain, the SID for
DOMAIN\Power Users shows up as an unrecognized security account on the local
machine, but after the machine is joined back to the domain, it shows up
properly. If you don't image, or don't want to re-image after doing this, I
believe it would be possible to script the addition of the account locally
using a startup script.)
3. In AD, add users or groups that need local Power User privilege to
DOMAIN\Power Users.
Alternately, if you wanted to get more granular, and allow some groups of
users to have Power User privilege only on some computers, while giving other
users Power User privilege on other computers, you could create multiple
groups in AD, then script the local Power User group membership with startup
scripts in appropriately applied GPO's.
Hope this makes sense...
"Media Player Setup" wrote:
> Windows Media Player-
>
> I work for a school district and we are running Windows Server 2003 with
> Windows XP Professional on all our clients. When a user logs into the
> domain/server, they are by default granted restricted user priviledges. Our
> version of Widows Media Player is 10.00.00.3646.
>
> My question is: How can we configure this so the setup of Windows Media
> Player does not launch when a new user logs in to the Domain/Server. We want
> everyone to have access to Windows Media Player but we do not want them to
> have to run through the steps that are required to setup Windows Media Player.
>
> The other question I have and a less important one at this time is: How can
> I configure our loggin process to give the users Power User priviledges when
> logging into the Domain/Server. By default they are setup as restricted
> users. Can I change this?
>
> Thank you for any help you can provide!!!
.
- Prev by Date: Re: lost WMP v9 - I want it back - please help me
- Next by Date: Re: C00D1197: Cannot play the file
- Previous by thread: lost WMP v9 - I want it back - please help me
- Next by thread: Windows Media Player Crashes on Web Access with Domain User accoun
- Index(es):
Relevant Pages
|
