Group membership and rights

From: Patrick (anonymous_at_discussions.microsoft.com)
Date: 03/12/04 

Date: Fri, 12 Mar 2004 12:29:30 -0800

We have a Win2003 DC (was upgraded from Win2K) and network
is mixed with 2000 & 2003 servers and W2K and XP
workstations. Login scripts are of the .vbs type,
not .bat and run at the OU level.

Problem is, when I place my users in the Domain Users
group as well as custom groups I've created that grant
access to necessary shares, their drives dont map at
login, certain apps dont run, and if the PC doesn't have a
domain user profile already created, they cant even log in.

As a result, I have most of my users in the Domanin Admins
group!!!! And thats gotta change!!!

Should I not have users in the Dom Users grp but maybe
Power Users? What local group should the local user
account on the workstation be a member of? Am I totally
screwing something up?

Thanks much in advance,
Patrick

Relevant Pages

  • Re: Promted for username & password when accessing network folder
    ... logons or security / access permitions? ... workstations are joined to the same domain. ... was that some users can connect to the shared folders from certain machines, ... Are you running any login scripts or client policies on your DC? ...
    (microsoft.public.windowsxp.network_web)
  • RE: Symantec Corporate AntiVirus 8.0 - thoughts
    ... >updates of workstations. ... Run a script that renames standard user login scripts. ... HUGE message in notepad opens on clients ... BUILT-IN, you just have to set up the Live Update Server, and configure the ...
    (Security-Basics)
  • Re: Problem after removed "domain users" from "local administrator"s g
    ... We finally decided to remove the "domain users" group from the "local administrators" group on the workstations and since doing that we have a strange problem happening. ... Some programs simply cannot be used without administrator privileges, ever, which is an excellent reason to switch to software written by competent people. ... The right answer, in hindsight, was to add Domain Users to the Local Users group. ...
    (microsoft.public.windows.server.sbs)
  • RE: Symantec Corporate AntiVirus 8.0 - thoughts
    ... updates of workstations. ... Run a script that renames standard user login scripts. ... HUGE message in notepad opens on clients machine to tell them to ... There was an article on creating your own local liveupdate server. ...
    (Security-Basics)
  • RE: Login Scrips in a Mixed World
    ... Because the Windows XP workstations connect to the PDC via WAN and Windows ... to guarantee the login scripts can run on the Windows XP ... remote office, and move these computers to that OU. ...
    (microsoft.public.windows.group_policy)