Re: Local Groups vs. AD Groups



manuellee wrote:
We have a WS2003 AD domain.  Our client computers are running XP.
We have configured AD accounts for domain users (set to the Domain
users group).  We also have an administrator account (for local
computer and for AD).

We installed a piece of software using the local computer
administrator account, but the software will not be available when
the AD domain users log on into the computer.

Can anybody help?


'red pill'
Best solution is to track this software requirements (in most cases some permissions to files and registry entries) and to configure system to meet these requirements (in most cases give users some additional permissions on objects).


'blue pill'
Possible solution but not the best one (but probably easiest one) is to use Restricted groups feauture of GPO and put Your users into local administrators group on these Windows XP boxes


the choice is Yours

If You take red pill remeber - filemon and regmon from www.systinternals.com can be your best frend adnapplication compatibility toolkit from mmicrsofot can be usefull as well

--
Tomasz Onyszko
http://www.w2k.pl
.



Relevant Pages

  • Re: Problems with giving the Domain Users group access to folders
    ... Try giving "users" from the local computer ... in the support/tools folder where you will need to run the setup program there. ... > Having a problem here with giving the group Domain Users rights to ... > folder and select the Security tab. ...
    (microsoft.public.win2000.security)
  • Re: domain users/local users
    ... Andrej ... >workgroup that it was in and cannot locate the domain users. ... >box only shows the local computer). ...
    (microsoft.public.windowsxp.security_admin)
  • Local Groups vs. AD Groups
    ... We have configured AD accounts for domain users (set to the Domain ... We also have an administrator account (for local ... We installed a piece of software using the local computer ...
    (microsoft.public.windows.server.active_directory)
  • domain users/local users
    ... I want to share the printer to one of the domain users. ... workgroup that it was in and cannot locate the domain users. ... box only shows the local computer). ... Rob ...
    (microsoft.public.windowsxp.security_admin)
  • Replacing Win98 with XP...
    ... replacements will be running XP. ... Since it is more secure, ... under the Administrator account, but obviously I don't want to make everyone ... Would I make the domain users part of the local power ...
    (microsoft.public.windowsxp.general)