Re: Same Profile for More than One Network User on Same Machine?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Doug Sherman [MVP] (dsherman_at_nospam.tampabay.rr.com)
Date: 07/29/04 

Date: Wed, 28 Jul 2004 21:59:51 -0400

Is Joe a member of a global or local group in the domain which has been
added to the the Win2k machine's built-in Administrators or Power Users
group?

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"Ken Dibble" <balderdash@spongemop.com> wrote in message
news:3khgg0lsi21aigji1ri6qfap1g1imur4fp@4ax.com...
> Thanks for replying.
>
> Nope, Joe is a restricted user. All of the resources that Mary needs
> to access but can't are on the local machine.
>
> Ken
>
> On Wed, 28 Jul 2004 12:00:12 -0400, "Doug Sherman [MVP]"
> <dsherman@nospam.tampabay.rr.com> wrote:
>
> >If you create Mary's domain user account by copying Joe's domain user
> >account, she should have the same access to network resources that he
does.
> >With respect to rights to local resources on the Win2k workstation, it
may
> >be that Joe's domain user account is a member of the machine's lbuilt-in
> >adminstrators group and Mary's isn't?
> >
> >Doug Sherman
> >MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
> >
> >"Ken Dibble" <balderdash@spongemop.com> wrote in message
> >news:3hhfg0t30juhqkrvblknq4hftajtpijstq@4ax.com...
> >> I've looked at all the current postings on profiles in this group and
> >> none seems to address my particular problem:
> >>
> >> Windows NT Server (with SP 6a) domain network and a Win 2000 SP3
> >> workstation.
> >>
> >> We don't use roaming profiles and I'm not trying to create one.
> >>
> >> I have a restricted user network domain login account called "Joe" set
> >> up on the Win 2000 box. I have set up another network domain login
> >> account "Mary" in NT Server to log in to this box. When Mary logs in,
> >> I want her to get Joe's profile.
> >>
> >> None of the stuff I've seen about this actually works as I expect. I
> >> can login to the box as Mary and get a new profile for her. I can then
> >> log in as Administrator and copy Joe's profile to Mary's profile.
> >> However, when I then login as Mary, I only get some aspects of Joe's
> >> profile--that is, the desktop is mostly, but not completely, the same;
> >> programs set to run on startup for Joe do not run for Mary, and Mary
> >> gets various "access denied" messages when trying to access resources
> >> that Joe can get to with no problem.
> >>
> >> Now, I know the simplest solution would just be to let Mary have Joe's
> >> login and password. The real-world situation is that "Joe" is going
> >> out on extended leave and "Mary" will be taking over some of "Joe's"
> >> duties during that leave. When "Joe" returns he could just change his
> >> password. And if there isn't a relatively quick and simple alternate
> >> solution, that's what I'll end up doing.
> >>
> >> I realize there may be some complex and time-consuming hack to achieve
> >> this. I also realize that I could spend a lot of time simply logging
> >> in as Mary and recreating everything Joe has by hand. I'm looking for
> >> a quick and simple solution--one that doesn't take much more time than
> >> it would take me to give Joe's password to Mary. I'm just hoping I'm
> >> missing something simple here.
> >>
> >> Thanks in advance for any help.
> >>
> >> Ken Dibble
> >> Southern Tier Independence Center
> >>
> >
>

Relevant Pages

  • Re: Scavenging Machine Acounts in AD
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Cary Shultz wrote:> Yes, Thank you, Joe! ... >>>>Cary Shultz wrote:>>>>>Mutsa,>>>>>>A large part of the problem apparently is that the domain user account>>>object is a member of the computer's local Administrators group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Settle a Administrators dispute
    ... Joe -- I do believe he's dorked with the permissions and I looked at the ... Administrators Local Group ON THE DOMAIN CONTROLLER. ... Administrators Local Group on the DC but not in the Domain Admins Global ...
    (microsoft.public.windows.server.active_directory)
  • Re: tlntadmn Error: failed to query registry value NTLM
    ... try creating a local group called "TelnetClients" and put inside the ... Joe White wrote: ... > 3) DefaultDomain ...
    (microsoft.public.win2000.networking)
  • Access denied on a domain user in a local account
    ... I created a local group "TestGroup" ... I added my domain user account "jvan" in it ... I added "TestGroup" to the list and gave them full control ...
    (microsoft.public.access.security)
  • Re: Cannot set specific authorization to a folder
    ... Thanks Joe, but I don't think Impersonate is applicable in this case. ... Co-author of "The .NET Developer's Guide to Directory Services ... I have a local group called ITCoordinators that I want to give access to ... I am logged in as a domain user that is directly added in the local group ...
    (microsoft.public.dotnet.framework.aspnet.security)