RE: Correct setup of XP-Pro computer on Win2K Domain

Setting up a local account on the xp machine does not result in local admin
rights for that user, you need to put them in the local admin group.
I also use some older programs, some will just not run unless installed by
the user who is using them.
Instead of creating an account on the machine, I just put Domain Users in
the local admin group.

"Mark" wrote:

> I'm running a small (25 workstations) Windows 2000 domain. We are slowly
> replacing all of our workstations (currently running Win98). I'm having
> inconsistent problems with security when I setup a new XP-Pro workstation.
> When I go through the XP installation, I typically make a single user account
> for the computer using the user's domain-user name. This (I believe) gives
> the user Administrator-level rights of the workstation, but, whatever rights
> he normally has on the network whenever he is logged onto the domain.
>
> Most of our applications have installers located on the network, so after
> the initial setup, I log onto the domain as Administrator and install the
> applications. We have a mix of older (Lotus Smartsuite 9.7 for one...) and
> newer applications. We use mapped drives, but I wouldn't be hesitant to
> switch to UNC if that would help!
>
> The problem is that when the user logs onto the domain, some of the
> applications cannot be run because the user doesn't have the correct rights.
> This is obvious from the various error messages (can't open config files,
> unable to find preferences files, etc). This can sometimes be fixed by
> overriding the security on the individual program directory, but not always,
> of course.
>
> I think that I must be doing something fundamentally wrong here. Should I
> be installing the applications only when logged on as the user? Should I
> create a separate Administrator account in XP on the workstation?
>
> TIA!
>
.

Relevant Pages

  • AD Setup Checklist: Request for Comments
    ... the workstation, but I would prefer, if possible, to set up a genuine ... I have elected to not use DHCP on the server at this time because the ... 3.Right click on the default admin account and select Properties ... 1.Log on to the XP Pro workstation as a local Admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: Automatically making AD users local administrators on computers in SBS 2003
    ... best" when assigning user rights. ... provide the client this account and password. ... can use this special local administrator account. ... > This will automatically give each user that logs in local Admin rights. ...
    (microsoft.public.windows.server.sbs)
  • Re: User rights when installing MSDE 2000A
    ... > rights and then run it with poweruser rights? ... > have to have local admin rights when I run it as well? ... > Now I have tried to install it with an account that have ... I always install MSDE using admin privileges, but what's important is to set ...
    (microsoft.public.sqlserver.msde)
  • Re: Exmerge on DC?
    ... I have a service account with rights to the ... the account is an Exchange full admin and I've given the ... Use a member machine and make yourself local admin. ...
    (microsoft.public.exchange.admin)
  • Re: Client Setup Wizard Error
    ... I don't want my users to have local admin ... I have no problem initially having admin rights to set them up, ... elevate the permissions of all domain users of that workstation to "local ... How can that work unless all users are Local Administrators at all times? ...
    (microsoft.public.windows.server.sbs)