Re: Local Administrators group

Hi,

Under Computer config I can't find Services, Registry, Filesystem or
Restricted Groups, is there something I'm missing? I have a Windows 2003
server with XP machines.

Thanks,


"Mark Heitbrink [MVP]" <spam-only@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:OxzSNc2uFHA.2512@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> spin schrieb:
>> Some of our users need to run some programmes that need to wright to reg
>> but
>> because they are domain users they dont get the right so we would like to
>> make them members of the local administrators group but i cant find any
>> thing in the a policy to do this.
>
> In Computer Config you will find:
> Services, Registry, Filesystem and Restricted Groups.
> In this place you can administrate the local permissions centrally.
>
> You can monitor the missing permissions for example with filemon and
> regmon from Sysinternals and only give change or full permission
> to the objects, where a user is usually not allowed to.
>
> Most programmes just need change permission in their installation
> directory and the HKLM\Software\NameofProduct Hive. Because they
> place temp files there or change entries.
>
> There are only a few applications, that really need local admin rights.
>
> HTH
> Mark
> --
> Mark Heitbrink - MVP Windows Server
> Homepage: www.gruppenrichtlinien.de
> W2K FAQ : http://w2k-faq.ebend.de
> PM: Vorname@Homepage, Versende-Adresse wird nicht abgerufen.


.

Relevant Pages

  • RE: SBS 2003 Outoging Fax Problem w/Error 32028 (Cannot send - fatal error)
    ... 1.Reduce the baud rate of the incoming fax modem and see how it goes. ... Click Permissions and verify that the user attempting to fax has at ... 3.If you have configured the fax client on the Windows XP computer ... On the "Additional Server Types" page, ...
    (microsoft.public.windows.server.sbs)
  • RE: Userenv Error
    ... Microsoft Windows Small Business Server 2003 Service Pack 1 ... Please check both the Share Permissions of the Group folder, ...
    (microsoft.public.windows.server.sbs)
  • Re: Workgroup server to domain
    ... Microsoft MVP - Windows NT Server ... >>may have to add permissions for domain users to access ... >>Scott Harding ... >>Microsoft MVP - Windows NT Server ...
    (microsoft.public.windows.server.migration)
  • Re: login/logoff Report
    ... located both the cmd files in the correct place now. ... Make sure you have hotfix 842933 applied to the SBS server ... truncated" error message when you try to modify or to view GPOs in Windows ... Make sure the "logging folder" share has Share Permissions: ...
    (microsoft.public.windows.server.sbs)
  • Re: Log on Interactively
    ... The server is a Windows 2003 Enterprise Edition Server ... I added the Remote Desktop Users group to the permissions tab with the User ... I then added the Terminal Services User group that I had ...
    (microsoft.public.windows.terminal_services)
Loading