Re: Vista logon scripts - the never ending question

On Jan 22, 2:02 am, "Florian Frommherz [MVP]"
<flor...@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
Howdie!

caleb.t...@xxxxxxxxx schrieb:

What exactly would be the difference between allowing users to be
local admins and being local power users? I would hate to go to all
of our computers to install their software for them. Would the
scripts run if they were local power users?

There is no Power Users group in Vista any more:http://windowshelp.microsoft.com/Windows/en-US/Help/34cdee3d-cfe2-448...

The point is: when people are local administrators, drive mappings are
run under the elevated token of the user while the normal desktop (after
the initial logon) runs under the user's normal token. Since it is
non-elevated application not allowed to access elevated resources, you
cannot see those drive mappings.

If you make your users non-admins, they'll not map the drives elevated
on logon.

cheers,

Florian
--
Microsoft MVP - Windows Server - Group Policy.
eMail: prename [at] frickelsoft [dot] net.
blog:http://www.frickelsoft.net/blog.

oh ok. But if they're normal users can they install software?
.

Relevant Pages

  • Re: Login script & network printers
    ... Power Users to install printers. ... >> account objects members of the local Power Users group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Best way to give local admin rights only across the domain
    ... afraid that will give them admin rights on the domain. ... Choose new group, browse to the domains' Local Power Users Group and add it to the local XP machine's groups, and choose Power Users ... browse to the ldomain's Local Admin Users Group and add it to the local XP machine's groups and choose Administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Login script & network printers
    ... So is there not a way to allow them to install just printers as if I ... give them power users it defeats my intention of preventing them from ... > account objects members of the local Power Users group. ...
    (microsoft.public.win2000.active_directory)
  • Re: Program Installation
    ... Is there a reason to have your users as local power users? ... will prevent them from the ability to install most applications. ... "Anver" wrote in message ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Grant users the right to change the registry
    ... You migh try adding the user to the local power users group which will allow ... registry permissions in a way similar to ntfs permissions. ...
    (microsoft.public.win2000.security)