Re: Groups

It is a bad idea to add normal users to the admin account, but there are
legitimate reasons to add certain users to the local admin accounts. Domain
admins (Some people have local admin authority on their box and figure they
don;t want others to have access to it so they remove all others), help
desk, etc...

This is a good way to do it as long as you can control the users who have
access. You are asking for problems if you just ram lots of people in
their.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
http://www.pbbergs.com

This posting is provided "AS IS" with no warranties, and confers no rights.

"Cary Shultz" <cwshultz@xxxxxxxx> wrote in message
news:ewvN7tGQGHA.2628@xxxxxxxxxxxxxxxxxxxxxxx
Nasa2000,

Be very very very careful doing this. You are opening up a potential can
or worms doing this. I can sing many songs from this situation....none of
the them very good (and that is not even addressing the issue with my
singing voice!).

It might, generally speaking, be a good idea to take a look at regmon and
filemon (both from http:///www.sysinternals.com) to find out where
software is failing (typically from an 'access denied' to a part of the
file directory structure or to a part of the registry) and make the
necessary changes.

Also, you might find - if using regmon and filemon are too 'expensive in
time-spent....it can be pretty labor-intensive....- try adding the domain
users, or your help desk group, to the local Power Users group on the
computers (instead of the local Administrators group).

Power Users can install most - but not all - software.

--
Cary W. Shultz
Roanoke, VA 24012

"Nasa20002" <Nasa20002.243vzx@xxxxxxxxxxxxx> wrote in message
news:Nasa20002.243vzx@xxxxxxxxxxxxxxxx

Hi again.

i found this

http://www.msresource.net/content/view/45/47/

Thankx Paul

Regards


--
Nasa20002
------------------------------------------------------------------------
Nasa20002's Profile: http://forums.techarena.in/member.php?userid=14057
View this thread: http://forums.techarena.in/showthread.php?t=469467

Free Computer Help - http://forums.techarena.in





.

Relevant Pages

  • Re: Permissions
    ... The local admin account and password are in sync. ... Joe Richards Microsoft MVP Windows Server Directory Services ... full control share permissions but limited NTFS permissions propagated ...
    (microsoft.public.windows.server.security)
  • Re: Best Practice for Domain & Local Admins
    ... are you referring to the Security one within Event Viewer that can be included in mailed reports? ... 3)I'm guessing the answer is yes, but should the pass phrase philosophy be set for BOTH domain AND local admin accounts? ... Make that admin account a passphrase. ... Any administrative tasks that need to be accomplished on local machines would use the local admin account. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium, user changes password and loses network share access
    ... If no local admin account, log on as a domain admin. ... profile that has local admin permissions on the workstation. ... Merv Porter [SBS-MVP] ...
    (microsoft.public.windows.server.sbs)
  • Re: Install program at startup
    ... Will the HKLM\RunOnce run as a local admin? ... When I logged in with an admin account, ... prefixed with an exclamation point to defer deletion of the value until ... command line is run unless overridden as noted above. ...
    (microsoft.public.windowsxp.general)
  • ISA Permissions
    ... The ISA is AD Mode. ... I Installed isa with local admin account, ... domain admin account, I put domain admin account in the ...
    (microsoft.public.isa)