Re: Domain Users rights on local machine

From: Marco (tired.of.spam)
Date: 02/09/04


Date: Mon, 9 Feb 2004 22:50:48 +0100

The domain Users are just members of the Users group. If you want to make
them Power Users open the Computer Management applet, select Local users &
groups -> groups -> Power Users and add to the list of members the Domain
Users group for your domain.

> Also, is a Domain Admin given Administrative access when he/she logs on to
the same box?

yes, because when you join a computer to a domain the Domain Admins group is
made member of the Local Administrators group. Any domain admin becomes
therefore an admin on the computer.

-- 
Execute applications with elevated privileges [ www.neovalens.com ]
--
"monty23" <paulm@equityin.com> wrote in message
news:CE1EDD3B-AC03-4787-BA12-9741C6EA959D@microsoft.com...
> By default what (local Machine) rights are given to a Domain User that
logs onto a XP Pro machine.  And if possible can I give all Domain Users
Power Users Access, if yes how so? Also, is a Domain Admin given
Administrative access when he/she logs on to the same box?


Relevant Pages

  • Re: How can i give rigths to my users like Local Power User?
    ... add my group here and add Power Users to members ... restricted groups then user still belong to power users group. ... MVP - Directory Services ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.windows.server.active_directory)
  • Re: user account types
    ... XP Home or Pro in the mode you indicate (i.e. domain members), ... very result you describe when an account was in Power Users, ... which it does not for a fresh account I just defined on a test XP ... Pro stand-alone. ...
    (microsoft.public.security)
  • RE: Send As permissions getting overwritten
    ... The issue should be caused that the users are members of the 'Domain ... Apply the 'Users' template to the existing power users using the Change ... User Permissions Wizard. ... >I've set up the security auditing as you've specified, ...
    (microsoft.public.windows.server.sbs)
  • Re: Add multiple users from AD to Local Group
    ... I would recommend making all of the users that should be "Power Users" ... members of a domain group, then make this one group a member of the "Power ... You must use the WinNT provider. ...
    (microsoft.public.windows.server.scripting)
  • Re: Local admin accounts gone haywire
    ... builtin/administrators and made the administrator and domain admins ... members of the group. ... domain policy would overwrite a policy further in the domain tree. ... Cannot find Power Users. ...
    (microsoft.public.win2000.group_policy)