Re: Computer user & domain user

Ron,

Thanks for your useful information.

I normally configure two accounts for each workstation. One is local pc
administrator account in administrators group and one is domain user account
in power user group. The user is logged on domain at work they are working
on travelling. Under this setup, the user is prohibited to install major
software on their computer without permission of administrator. It works
for most of users. However, I notice a couple of users that they are unable
to write anything on drive C: or access to other accounts on the network
without apparent reasons. If I change the Power User account to
Administrators group, it works fine. I am at loss why most of users are
working correctly with Power User group but some needs administrators group
to work correctly. Any ideas to trace the causes of the problem?

Thanks,

Ray

"Ron Lowe" <ron-msng@{d.e.l.e.t.e}lowe-family.me.uk> wrote in message
news:%23eJ$oS2cFHA.796@xxxxxxxxxxxxxxxxxxxxxxx
> "Ray" <NoSpam-ray.ck.li@xxxxxxxxx> wrote in message
> news:efJDsm1cFHA.2644@xxxxxxxxxxxxxxxxxxxxxxx
>> Can someone advise me the differences in access right for installed
>> software between computer user & domain user in a Windows XP Pro
>> computer.
>>
>> Thanks,
>>
>> Ray
>>
>
>
> When a computer joins a domain, the domain user's group
> 'Domain\users' is inserted into the local PC users group, 'LocalPC\Users'.
>
> So in general, a domain user has the same rights as a local user.
>
> This means that anything which has permissions for the 'users' group
> will automatically have permissions for domain users too.
>
> However, if something has specific permissions for an individual local
> user, like LocalPC\Ron, then that will not include Domain\Ron. These are
> different accounts.
>
> This is one reason it's best to grant permissions to groups wherever
> possible, rather than individuals.
>
> --
> Best Regards
> Ron Lowe
> MVP - Windows Networking
>
>


.

Relevant Pages

  • Re: Newbie question on SQL connection
    ... > Let me educate you about SQL Server security. ... granting permissions to these accounts in SQL ... > maintain its own user accounts, which are separate from domain user ...
    (microsoft.public.dotnet.framework.aspnet)
  • Security on Administrative Tools
    ... of creating user accounts. ... I've tried removing the Administrators group from the permissions on ... Administrators group, all I had to do was take ownership, and then add the ... A user could access the User Accounts ...
    (microsoft.public.windowsxp.security_admin)
  • WindowsXP Registry Permissions
    ... I hav changed the registry permissions for the hive of Hkey_Classes_Root. ... And Given full permissions to accounts of System & Administrators Group. ... hav changed the permissions of both hives of classes i.e Hkey_Classes_Root & ...
    (microsoft.public.windowsxp.general)
  • WindowsXP Registry Permissions
    ... I hav changed the registry permissions for the hive of Hkey_Classes_Root. ... And Given full permissions to accounts of System & Administrators Group. ... hav changed the permissions of both hives of classes i.e Hkey_Classes_Root & ...
    (microsoft.public.windowsxp.basics)
  • WindowsXP Registry Permissions
    ... I hav changed the registry permissions for the hive of Hkey_Classes_Root. ... And Given full permissions to accounts of System & Administrators Group. ... hav changed the permissions of both hives of classes i.e Hkey_Classes_Root & ...
    (microsoft.public.windowsxp.help_and_support)
Loading