Re: default GPOs for a Domain User?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Hi,

k schrieb:
> Using AD on windows 2003 server with windowsXP SP2 clients; if a user is
> in the "Domain user" which rights does the user not have compared to an
> administrator?

If you don´t manipulate the restricted group settings, the domain user
is mapped to the local users group.

Inside the XP helpsystem there is a overview and comparison of
administrators, power users and users.

ms-its:C:\WINDOWS\Help\SCEconcepts.chm::/windows_security_default_settings.htm
ms-its:C:\WINDOWS\Help\SCEconcepts.chm::/sag_SEconceptsUnPrivs.htm

Soryy I can´t find a default rights schema, that shows the domain user
rights in a AD or on a DC. Take a look inside the security templates and
the defdomconpol.


Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
.



Relevant Pages

  • Re: UserName and Kerberos tokens at the same time
    ... > What makes me feeling a bit strange is that the WSE 3.0 Kerberos demo also ... Are you logon the computer as a domain user when running the ... I have tried it on a Windows 2003 server as well and there I get the ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • Application Pool + Domain User + Windows authentication - bug?
    ... This works fine on Windows 2000, but on Windows Server 2003 ... the Windows Authentication is going to crazy after the lot of page ... Create Application Pool for this application with domain user ...
    (microsoft.public.inetserver.iis)
  • Re: Dcpromo in windows 2003 and windows 2003 R2
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... The language of the windows 2003 and windows 2003 r2 are not equal ... Run adprep /forestprep on the 2003 server from the second R2 cd to ...
    (microsoft.public.windows.server.active_directory)
  • Re: Synchronized Tasks
    ... If the job connects to another machine you may need to add the user/ group 'logon as batch job' rights (server side). ... I'm running the task on a Windows 2003 server, ...
    (microsoft.public.win2000.general)
  • Re: Question about MS Server 2003 Features
    ... > in terms of NetWare but I have looked unsuccesfully for how Windows ... > you have the appropriate rights. ... There are per-user quotas, but nothing more - again, third party software. ... Does that still happen in Server 2003? ...
    (microsoft.public.windows.server.general)