Re: Protecting the 'All Users' Start Menu

This might not help....but this is what I normally do.

I like to create the 'stuff' that I want to be available to everyone in the
default users profile. This way, if someone deletes something it does not
affect everyone else. However, this is simply part of your situation and
does not really answer the question. The permissions would be where I would
start. Also, as aptly stated, if your domain user account objects are
member of the local Administrators group on the computers then there is
really nothing that you can do.....other than threaten them with bodily
harm....and if you do not want to do that I can be your muscle! ;-)

Think about the default user thing.....it might be of interest. But the
permissions thing is the true answer.

--
Cary W. Shultz
Roanoke, VA 24012

http://www.activedirectory-win2000.com
(soon to be updated!!!)
http://www.grouppolicy-win2000.com
(soon to be updated!!!)



"?????????" <me@home> wrote in message
news:laadnZO0aLZ1HNDeRVnyhw@xxxxxxxxxxxx
> Brandon McGarvey wrote:
>> "Users" should not be able to modify files in the "All Users" profile by
>> default (should have Read & Execute only). Either permissions have been
>> modified on that folder or your users are Administrators.
>>
>> "Randy Reimers" wrote:
>>
>>
>>>Set it that it is read-only - or change the rights so that normal users
>>>can only read - not modify or delete. Of course, if the "normal" user is
>>>a member of the local "Administrators" group - good luck.
>>>
>>>Randy Reimers
>>>
>>>
> The users are Power Users and none of them are Administrators. As far as I
> know no rights have been modified on the image but I didn't create them. I
> will check tomorrow and if they have been changed I will have to make the
> change.
>
> Thanks for the replies


.

Relevant Pages

  • Re: Domain Rights
    ... Ordinary users didn't need local admins ... Create a new OU for computers. ... Delegate permissions create/delete ... Add IT_Techs to local administrators group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Shared permissions vs. security
    ... Did you have to make the users power users or administrators only after you ... write/modify permissions to a folder if that is what they need to do their ... -- Verify that membership in the administrators group on all computers is ... updates at Windows Updates. ...
    (microsoft.public.win2000.security)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)
  • Re: Open With.. functionality doesnt fully work
    ... key's permissions are getting munged, ... > Small correction: ... > Ramesh, Microsoft MVP ... >> Administrators ...
    (microsoft.public.windowsxp.customize)