Re: Local user privileges

I've been experimenting with domain and local users. As you say when I look
into the user accounts on the local computer I can see local user accounts
and domain user accounts. They have different icons. One with user with
computer for local users and other with user with hearth for domain users.

When I looked at an user account both local and domain accounts where set as
administrator for the local machine. I think this is not good as a user
should not have administrator privileges ever his local machine. Then I
changed both user and domain accounts to user privileges. After this I've
loged with the user domain account and discovered that I still have full
administrator privileges over the local machine. I've don't undertood this
until I've found that the users domain group is inside the administrators
group!!!

Now even more wierd. I've deleted the domain users group from the local
administrators group so the , in theory, user can't have admin rights over
the local machine when loged into the domain... After removing this the
account not worked as espected. Windows interface has changed and user can't
acces his files.

How is this possible?

Regards,
Angel.

> The Domain Users are mapped/integrated in the local User Accounts.
> Just login as a domain user and take a look inside your groups.
> Yourdomain\Youruser will appera inside the local users group.
> Check out if he is inside other groups aswell.


.

Relevant Pages

  • Re: xp control panel does not display in safe mode
    ... Control Panel in the Windows XP General newsgroup. ... There is no password protection on my laptop for the Administrator ... Once you have the command prompt window open you can use the net user ... This should launch the alternate User Accounts applet. ...
    (microsoft.public.windowsxp.configuration_manage)
  • Re: logging in to windows
    ... Once Windows starts loading, you've missed it and will have ... You'll have an option to log on as Administrator. ... > Start by treating it as a lost password as follows:> If you have XP Pro on your computer, at the log in screen type ... Then go to Control Panel, user accounts, select the> specific user and select change password. ...
    (microsoft.public.windowsxp.accessibility)
  • Re: seeing another computer on a LAN
    ... I tried to change the user name from "User" to "Administrator" but got the message "An account named 'Administrator' already exists..." ... If you are able to see a user called Administrator on one of the machines in Regular Mode, ... create matching user accounts on both machines. ... Problems sharing files between computers on a network are generally caused by 1) a misconfigured firewall; or 2) inadvertently running two firewalls such as the built-in Windows Firewall and a third-party firewall; and/or 3) not having identical user accounts and passwords on all Workgroup machines; 4) trying to create shares where the operating system does not permit it. ...
    (microsoft.public.windowsxp.network_web)
  • Windows Intataller 3.1 Issue?
    ... My XP Pro system is configured with one administrator account and two limited ... Installer" box with "Preparing to install Acrobat 7.0.8" pop up every time I ... logged onto one of the limited user accounts. ... registry keys with SYSTEM and ADMINISTRATOR permissions only. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: password protected user on slave drive
    ... When you're booted into safe mode, you should be able to see the ... Administrator account in the User Accounts control panel even though it ... > account with a password-- I don't see it in User Accounts in the Control ... >>> Computer Administrator account, which I had password protected in order ...
    (microsoft.public.windowsxp.security_admin)
Loading