Re: Rights Issues (i think) with domain pc's

From: walter (spam)2000_at_(nospam)yahoo.com)
Date: 06/03/04 

Date: Thu, 3 Jun 2004 11:03:25 -0400

I understand all this, but....
Surely it cannot be the standard way with Word Perfect (which is a fairly
mainstream app) that..well, lets put it this way.. say you install WP using
a GPO to 25 workstations ( or in this case, 25 already installed
workstations)..to then have to manually go to each of these systems an give
the users rights to use that app... well, that seems a bit 'retarded' to
me if true.. lol and there are plenty of networks out there using WP
without this need..., I think....../sigh

"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:OucsdTXSEHA.3812@TK2MSFTNGP11.phx.gbl...
> walter wrote:
> > I'm not really sure where to post this question, so I'm trying
> > here.......
> >
> > I've inherited a small network. W2k server and several pc's running
> > WP10 and WP11...
> > I noticed that all users on the network were given Administrative
> > rights (at the domain level, all users are part of the administrator
> > grp Domain Administrators)
> > I don't think this is such a great idea, so I want to remove them
> > from this grp so they are members only of the Domain Users grp--This
> > is the standard way a network is setup, I believe.....
>
> Absolutely!!!
> >
> > You probably know that a member of the domain administrators grp by
> > default is given administrator rights to the local XP computer they
> > are logged into. So, right now, they are administrators of the local
> > pc as well as the network.
> >
> > My problem is this. When I remove them from the domain administrators
> > grp, WP does not work correctly,e.g.-there are certain functions that
> > no longer work (spell check for one) When I put them back into the
> > Admin grp, then everything works again.....
>
> If absolutely necessary, you can add Domain Users to the local
> administrators group on each computer. Maybe do that right now, and then
> when you have more time, troubleshoot the WP issue - maybe check their
> support site to figure out what they need right to. Would PowerUsers do
it?
> Etc etc etc.
>
> >
> > there must be a rights issue then on the local machine......?
> >
> > But why? A standard network user does not have domain admin
> > rights........
>
> Absolutely true.
>
> > No doubt, WP was installed by a user with domain
> > rights, but still, why is it needing admin rights to operate?
>
> Because it's written badly? That's the usual culprit. Still, as mentioned
> above, if they have *local* admin rights, it ought to work - domain admin
is
> WAAAAY overkill and a bad idea.
>
> > What can I do to fix it?
> > Where should I even start to look?
> > My next step when next Im there, is to add the network user as a user
> > on the local machine with admin rights (this will make him a admin
> > for the local PC, but not for the network) and see what this
> > does.........
> >
> > I suspect that things will then work correctly again, but that is not
> > a solution...
>
> Agreed. But it will buy you some time.
> >
> >
> > Any insights or comments, or outright solutions would be greatly
> > appreaciated..
> >
> > If anyone knows of a better place to ask this question, I would
> > appreaciate that info too.....
> >
> > I'm grasping at straws,,, ANY thoughts.....
>
>

Relevant Pages

  • Re: IIS 5 Authentication problem- solved
    ... >In Local Security Policies/User Rights Assignment I had ... >to this computer from the network". ... >would grant only administrators the right to "deny ... >>account name for newsgroup participation only. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Rights Issues (i think) with domain pcs
    ... > I noticed that all users on the network were given Administrative ... > rights (at the domain level, all users are part of the administrator ... > You probably know that a member of the domain administrators grp by ... A standard network user does not have domain admin ...
    (microsoft.public.windows.server.general)
  • RE: Offer Remote Assistance - "Permission denied" - Windows XP SP2
    ... I am on a Novell network. ... > being made from and under the security context of a Local AND Domain ... > Allow logon through Terminal Services Administrators,Remote Desktop Users ... > Back up files and directories Administrators ...
    (microsoft.public.windowsxp.security_admin)
  • Re: How Can I Allow Access From The Internet to Only Selected User
    ... users, groups, client ip address ranges, client computer naming conventions ... All users can access Terminal Server from inside the network ... "select remote users" and enter in th administrators group. ...
    (microsoft.public.windows.terminal_services)
  • Re: Seeking Win2000 Policy Advice
    ... "Not trusting your developers ... is as bad, if not worse, than not trusting your network administrators." ... you have anyone serious about network security working in your company, ... frequently using the internet as a resource. ...
    (comp.os.ms-windows.nt.admin.security)