Re: GPO and Remote Users

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 07/26/04 

Date: Mon, 26 Jul 2004 17:58:02 GMT

By default logon on with cached credentials is enabled. You could also add the users
domain account to the local power users group on their computer which may accomplish
what you need, though to remove and add devices they may need to be in the local
administrators group which gives them a lot of power on their local computer , but
you may not have any other option. Keep in mind that both power users and local
administrators can create local users [if they know how] and if they logon with local
user accounts, user configuration Group Policy from the domain will not apply to
them. You can also configure Local Security Policy on a computer via gpedit.msc
which will apply to ALL users that logon with local accounts which may help prevent
the idle curious from changing settings that may cause problems on their computer.---
Steve

"Steve" <steve.bray@vca.gov.uk> wrote in message
news:426a01c47324$f22ba520$a601280a@phx.gbl...
> We need our notebook users who login to their notebooks
> with a cached copy of their domain profile when out of the
> office to have the same sort of rights as the Power User
> would have i.e. install software, add/remove devices etc.
>
> If this is possible how is it done?
>
> Steve

Relevant Pages

  • Re: GPO and Remote Users
    ... Steve ... >> By default logon on with cached credentials is enabled. ... Keep in mind that both power users ... >> user accounts, user configuration Group Policy from the domain will not ...
    (microsoft.public.win2000.group_policy)
  • Re: GPO and Remote Users
    ... Steve ... > By default logon on with cached credentials is enabled. ... > domain account to the local power users group on their computer which may ... > user accounts, user configuration Group Policy from the domain will not ...
    (microsoft.public.win2000.group_policy)
  • Re: logon/power-users group question
    ... users to the power users group (via My computer>Properties>Computer ... and then logon to the computer with that account to bypass domain ... > You can limit logon to domain computers in a couple of ways. ...
    (microsoft.public.windows.server.security)
  • Re: logon/power-users group question
    ... Power users by default can do a lot to a computer and have write permissions ... to the computer with that account to bypass domain Group Policy for users. ... You can limit logon to domain computers in a couple of ways. ... > essentially can install programs but not modify any system files (eg. OS ...
    (microsoft.public.windows.server.security)
  • Re: power users access
    ... Power users access was not could enough ... > sections of the Windows registry or protected Windows system folders. ... > limited accounts, you can fix it to allow limited users to access the ...
    (microsoft.public.windowsxp.security_admin)