Re: User Rights

Thanks Joe, Now i understood.

"Joe Richards [MVP]" wrote:

> Not necessarily. For instance none of my programs require admin to install, you
> only need write access to some part of the file system. You need admin rights if
> you are writing to some portion of the system that only allows admins to write
> such as parts of the registry or file system.
>
> This isn't something that can be completely blocked for this very reason. You
> can not set up ACLs in NTFS to block types of files. It is all just data.
>
> joe
>
> --
> Joe Richards Microsoft MVP Windows Server Directory Services
> www.joeware.net
>
>
> Danny Sanders wrote:
> > Are they members of the domain admin group?
> >
> > They need to be *some* kind of administrator to install programs.
> >
> > DDS
> > "Venkat" <Venkat@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:B9161B86-C8BF-45C3-8F0D-277337F04366@xxxxxxxxxxxxxxxx
> >> No. It is not a member of local administrator group
> >>
> >> "Danny Sanders" wrote:
> >>
> >>> I found a user who has
> >>>> installed applications to his windows xp machine in D drive. I need to
> >>>> restrict them installing application by their own and i also need to
> >>>> allow
> >>>> them to save their data to D drive. These users are in domain user
> >>>> group.
> >>> If their domain account is a member of the local administrator group
> >>> remove
> >>> it.
> >>>
> >>>
> >>> hth
> >>> DDS W 2k MVP MCSE
> >>>
> >>> "Venkat" <Venkat@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> >>> news:F927A59D-9EA5-4645-8100-2F09649BD4E5@xxxxxxxxxxxxxxxx
> >>>> Hi,
> >>>>
> >>>> In our office, Windows 2000 is domin controller and the clients are
> >>>> windows
> >>>> XP. In C drive windows XP is installed and in D drive users are allowed
> >>>> to
> >>>> save their data which has modify access to the users. I found a user
> >>>> who
> >>>> has
> >>>> installed applications to his windows xp machine in D drive. I need to
> >>>> restrict them installing application by their own and i also need to
> >>>> allow
> >>>> them to save their data to D drive. These users are in domain user
> >>>> group.
> >>>>
> >>>> Thanks in Advance
> >>>> Regards
> >>>> Venki
> >>>
> >>>
> >
> >
>
.

Relevant Pages

  • Re: [opensuse] Undelete
    ... could go back and retrieve an older version of the file you were ... Nice feature, except if the admin had limited the ... snapshots of select portions of your file system. ...
    (SuSE)
  • Re: How can I get my sons program to run in an account with no admin rights?
    ... These could be restrictions on the file system, a folder where data is stored, or even on a Registry key that limited user's normally do not have permissions to write to. ... My XP pro PC has me as the main user with full admin. ... "Bob the builder" game from the BBC from my account, ... Nothing obvious in the control panel except user ...
    (microsoft.public.windowsxp.basics)
  • File Security System on XP
    ... someone other than an admin. ... logs on, the PC will be ... so they can't change any file system ... PC, can't install any programs. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Can I run a program as another user?
    ... application when the user logs on or logs off (quite similar to putting ... application it will not allow them to re-open it as an admin. ... the main problems have been file system and registry ... almost all users are administators of their computers because some apps ...
    (microsoft.public.windows.server.active_directory)
  • [UNIX] Privilege Escalation Vulnerability on phpBB
    ... permissions), so although admin rights are needed to view the page, anyone ... Goto the board you wish to change the permissions for in the normal way ... Find the base directory location of the board for the script, ... This bulletin is sent to members of the SecuriTeam mailing list. ...
    (Securiteam)