Re: Rights Issues (i think) with domain pc's
From: jazz (aprilo9_at_hotmail.com.nospam)
Date: 06/03/04
- Next message: Jim Burns: "Functional levels"
- Previous message: Marin Marinov: "Re: Exporting users that below to a certain group - windows 2003 active directory"
- In reply to: Lanwench [MVP - Exchange]: "Re: Rights Issues (i think) with domain pc's"
- Next in thread: walter: "Re: Rights Issues (i think) with domain pc's"
- Messages sorted by: [ date ] [ thread ]
Date: Thu, 3 Jun 2004 12:56:16 -0400
Quickbooks is the same and requires admin privileges on the local
computers. I think it is because of writing to the registry or somethign
simular to that. (for monitoriung the issue) I too had to add the users ot
eh admin group on the local computers. But in our case we have some
computers that diferent users use and aren't allowed accessing certain
programs. I inherited this network also other wise i would have set up
custom user groups based on departments and access needs and just add the
users to the groups from the server as needed. The only thing stoping me
from doing this now is it will take some time problem shooting what people
don't know they need access to because they them selves don't know. When
originally setting the network up, it would be easier because the problems
are more or less expected and you would have a more defined user list.
lanwrench has the right idea. You might be able to improve on it a little
but be aware of some issues that might pop up.
"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:OucsdTXSEHA.3812@TK2MSFTNGP11.phx.gbl...
> walter wrote:
> > I'm not really sure where to post this question, so I'm trying
> > here.......
> >
> > I've inherited a small network. W2k server and several pc's running
> > WP10 and WP11...
> > I noticed that all users on the network were given Administrative
> > rights (at the domain level, all users are part of the administrator
> > grp Domain Administrators)
> > I don't think this is such a great idea, so I want to remove them
> > from this grp so they are members only of the Domain Users grp--This
> > is the standard way a network is setup, I believe.....
>
> Absolutely!!!
> >
> > You probably know that a member of the domain administrators grp by
> > default is given administrator rights to the local XP computer they
> > are logged into. So, right now, they are administrators of the local
> > pc as well as the network.
> >
> > My problem is this. When I remove them from the domain administrators
> > grp, WP does not work correctly,e.g.-there are certain functions that
> > no longer work (spell check for one) When I put them back into the
> > Admin grp, then everything works again.....
>
> If absolutely necessary, you can add Domain Users to the local
> administrators group on each computer. Maybe do that right now, and then
> when you have more time, troubleshoot the WP issue - maybe check their
> support site to figure out what they need right to. Would PowerUsers do
it?
> Etc etc etc.
>
> >
> > there must be a rights issue then on the local machine......?
> >
> > But why? A standard network user does not have domain admin
> > rights........
>
> Absolutely true.
>
> > No doubt, WP was installed by a user with domain
> > rights, but still, why is it needing admin rights to operate?
>
> Because it's written badly? That's the usual culprit. Still, as mentioned
> above, if they have *local* admin rights, it ought to work - domain admin
is
> WAAAAY overkill and a bad idea.
>
> > What can I do to fix it?
> > Where should I even start to look?
> > My next step when next Im there, is to add the network user as a user
> > on the local machine with admin rights (this will make him a admin
> > for the local PC, but not for the network) and see what this
> > does.........
> >
> > I suspect that things will then work correctly again, but that is not
> > a solution...
>
> Agreed. But it will buy you some time.
> >
> >
> > Any insights or comments, or outright solutions would be greatly
> > appreaciated..
> >
> > If anyone knows of a better place to ask this question, I would
> > appreaciate that info too.....
> >
> > I'm grasping at straws,,, ANY thoughts.....
>
>
- Next message: Jim Burns: "Functional levels"
- Previous message: Marin Marinov: "Re: Exporting users that below to a certain group - windows 2003 active directory"
- In reply to: Lanwench [MVP - Exchange]: "Re: Rights Issues (i think) with domain pc's"
- Next in thread: walter: "Re: Rights Issues (i think) with domain pc's"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
