Re: Local user privileges

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

Angel Massa schrieb:
> [...]
> 4.- I loog for Administrators groups and check members.
> 5.- Here I have DOMAIN\Domain users on the local Administrators group.
> [...]
> I don't know why domain users group has to be added to local administrador
> group to work.

I´m irritated. Thats definitly not the default behavior ... :-(
Did you worked with "Restricted Groups" in a GPO?
It´s definetly not a matter of the roaming profile.

Try this:
- create a new OU
- place one computer object in it (just to make sure that you
are only configuring this pc ...)
- create a new GPO on this OU
- Edit the restricted Groups
New Group: Administrators only add Administrators and Domain Admins
New Group: Users add DomainUSers
- make a gpupdate /force on the client and look what happens ;-)

Mark
--
Mark Heitbrink - MVP Windows Server
Homepage: www.gruppenrichtlinien.de
W2K FAQ : http://w2k-faq.ebend.de
PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.
.

Relevant Pages

  • Re: where is that policy that prevents the administrator hiding??
    ... First off, if at all possible, you want to prevent regular users from being members ... difficult to restrict them - particularly as local administrators. ... There are many Group policy settings to restrict users. ...
    (microsoft.public.win2000.security)
  • RE: GPO Application
    ... There is a dependent GPO setting that's likely catching you here. ... also have to check "Enable Windows 2000 Network Connections settings for ... features from Administrators." ... users who are not local administrators and who aren't part of the Domain ...
    (Security-Basics)
  • OpenDataSource "Unspecified Error" when connecting to local Excel spreadsheet file with no
    ... the file is on the local Sql Server. ... Even if I add domain users to the server administrator role, ... administrators group on the Sql Server, ... local administrators group on the Sql Server? ...
    (microsoft.public.sqlserver.connect)
  • OpenDataSource "Unspecified Error" connecting to Excel file
    ... the file is on the local Sql Server. ... Even if I add domain users to the server administrator role, ... administrators group on the Sql Server, ... local administrators group on the Sql Server? ...
    (microsoft.public.sqlserver.connect)
  • Re: Minimum security
    ... I have not used roaming profiles, but generally users have full control or at ... As far as all users being local administrators, that is not a good idea unless ... > I have the domain users group set as local administrators on all of my win ...
    (microsoft.public.win2000.security)