Re: Computer user & domain user

"Ray" <NoSpam-lizhiqiang1@xxxxxxxxx> wrote in message
news:%23qrEfE6cFHA.1288@xxxxxxxxxxxxxxxxxxxxxxx
> Ron,
>
> Thanks for your useful information.
>
> I normally configure two accounts for each workstation. One is local pc
> administrator account in administrators group and one is domain user
> account in power user group. The user is logged on domain at work they
> are working on travelling. Under this setup, the user is prohibited to
> install major software on their computer without permission of
> administrator. It works for most of users. However, I notice a couple of
> users that they are unable to write anything on drive C: or access to
> other accounts on the network without apparent reasons. If I change the
> Power User account to Administrators group, it works fine. I am at loss
> why most of users are working correctly with Power User group but some
> needs administrators group to work correctly. Any ideas to trace the
> causes of the problem?
>
> Thanks,
>
> Ray



You'd need to compare the NTFS permissions on the C: drive
between a machine that works and a machine that doesn't.

On my XP-Pro machine here, the permissions on the C:\ root directory are as
follows:

Administrators group has Full Control;
System has Full Control;
Creator-Owner has Special permissions;
Everyone has Special Permissions( Read+Execute )
Users has Read+Execute

There is no entry for power-users, unless you create one.
So the default permissions will only permit a power user read+execute
permissions,
unless he also happens to be an Administrator.

So I'm not surprised your 'power users' can't write to C:\

The question becomes:
How can your other Power Users write to C:\ ?

Are there additional permissions on the C: root folder,
or is the user a member of an additional group?

It has to be one or the other!

--
Best Regards
Ron Lowe
MVP - Windows Networking


.

Relevant Pages

  • Re: installing games so other users can access and save their game
    ... Okay here's what I've found in the registry looking at the permissions in the ... " or "OWNER" or my account (which is actually the Owner ... Hit a few times and exited the registry and the rebooted. ... below labeled "Change owner to:" it listed 2 names, "Administrators ...
    (microsoft.public.games)
  • Odd behaviour with user accounts (accounts "hidden")
    ... installation), dad and kids. ... "Administrators" group. ... As soon as I remove "kids" from the administrators group the account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Cant Remember How to Setup User Accounts
    ... When you create a user account by default ... > Then you can use NTFS folder permissions to manage what users on your ... > administrators, system, and your user account with full permission. ... > EFS file encryption built in. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help with Guest account
    ... Are you sure you are using an administrator account and did you verify it ... You can also run the command net user ... it is a member of the administrators group under local group memberships. ... Local Group Memberships *Administrators *Network Configuration ...
    (microsoft.public.windowsxp.security_admin)
  • RE: admt v2 migration problems
    ... According to the log file, I suspect that the problem is related to the ... account permissions on the problematic machine. ... - A member of the Administrators group in Domain2. ... The problem may also occur if the file system or registry permissions ...
    (microsoft.public.windows.server.migration)