Active Directory Group Permissions

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: jmaxwell (jmaxwell_at_discussions.microsoft.com)
Date: 02/04/05 

Date: Fri, 4 Feb 2005 08:25:06 -0800

>From a security perspective, having a local admin on a system is troublesome.
I would like to create a new group or modify an existing (Power Users) Group
to meet the field’s needs. The problem is we have many groups that utilize
many applications that are Admin intensive. I.E. Many Engineers need registry
rights to a certain area in the registry.

Is there a tool that I can run on systems within each of these groups to
determine what rights they need and then record this to modify a users group.
This would give us better control over our workstations.

Any help is appreciated.

Thanks

Relevant Pages

  • Access is denied
    ... power users - Access, Launch and Configuration rights were ... >local admin rights. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Access is denied
    ... power users - Access, Launch and Configuration rights were ... >local admin rights. ...
    (microsoft.public.internet.mail)
  • Access is denied
    ... power users - Access, Launch and Configuration rights were ... >local admin rights. ...
    (microsoft.public.win2000.termserv.clients)
  • Re: How to make a copy of a Power User Group?
    ... > new group on the built-in 'Power users' group and then modify it. ... >>> I want another group that has the rights like those of the Power Users ...
    (microsoft.public.windowsxp.security_admin)
  • RE: local admin vs group policy and apps...
    ... what every user needs access to--whether to modify or read etc. ... It also appears that as one of the apps is two programs 'married' together ... local admin vs group policy and apps... ... The gpo setting, prohibit access to the control panel, ...
    (Focus-Microsoft)