Re: Domain user in local administrator group

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Igor Fomin (XXXigorf_at_XXXdigdes.com)
Date: 04/22/04 

Date: Thu, 22 Apr 2004 10:05:48 +0400

All will be all right. Althoug they will be Local Administrators all the
restrictions still will be apply to them. The other hand is that they will
be able to do lots of restricted actions using other methods (command prompt
tools and so on).

You wrote that it will be enough to make them Power Users only? It's the
best decision, I think... You can not select Power Users group when you edit
Restricted Group in GPO, but you can just type "Power Users" there...

"oscarmok" <oscarmok@hotmail.com> wrote in message
news:404aa7f0.0404210923.308470f4@posting.google.com...
> If I put the domain user into their xp local administrator group, will
> the gpo able to overwrite the local administrator rights?
>
> I have users with scanner attach to their pc. I was told only power
> user and higher local groups can run the scanner without any problem.
> I want the user to use the scanner but still apply our gpo (like no
> add/remove program; access registry etc.) All user accounts are
> domain account.
>
> Please help!!

Relevant Pages

  • Re: Power User Account corrupted?
    ... Are you sure these programs do not need you to be a local administrator? ... If other power users that are not also local administrators can install them ... to folders as powers users on the computers where it works. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Domain user in local administrator group
    ... The GPO will only override the user's membership if there is a restricted ... > If I put the domain user into their xp local administrator group, ... > user and higher local groups can run the scanner without any problem. ... access registry etc.) All user accounts are ...
    (microsoft.public.win2000.group_policy)
  • Re: unable to run programs on domain
    ... Try adding their domain account to the power users local group on their machine. ... rights they can create a local administrator account to log onto and avoid domain ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Technical Info for Win Xp
    ... you can register DLL with power users right. ... >> I'd like to know if I am member of power Users Group, ... >> Or I need to be local administrator? ...
    (microsoft.public.win2000.registry)
  • Re: how to setup gpo to prevent IE
    ... You can not configure website exclusions via GPO, use ISA server for it or maybe some free proxy servers if you can't spend money. ... Do your clients use the local administrator account or are they in the domain admins or equivalent group? ... If they have the local administrator account, ...
    (microsoft.public.win2000.group_policy)