Re: Rights Issues (i think) with domain pc's

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Lanwench [MVP - Exchange] (lanwench_at_heybuddy.donotsendme.unsolicitedmail.atyahoo.com)
Date: 06/03/04


Date: Thu, 3 Jun 2004 15:19:41 -0400

It could very possibly be true. As Jazz says, Quickbooks and other Intuit
products are the same way. So are like 80% of the kids' games I've tried to
install on clients' home networks. Sloppy developers seem to find work
everywhere.

walter wrote:
> I understand all this, but....
> Surely it cannot be the standard way with Word Perfect (which is a
> fairly mainstream app) that..well, lets put it this way.. say you
> install WP using a GPO to 25 workstations ( or in this case, 25
> already installed workstations)..to then have to manually go to each
> of these systems an give the users rights to use that app... well,
> that seems a bit 'retarded' to me if true.. lol and there are
> plenty of networks out there using WP without this need..., I
> think....../sigh
>
>
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in
> message news:OucsdTXSEHA.3812@TK2MSFTNGP11.phx.gbl...
>> walter wrote:
>>> I'm not really sure where to post this question, so I'm trying
>>> here.......
>>>
>>> I've inherited a small network. W2k server and several pc's running
>>> WP10 and WP11...
>>> I noticed that all users on the network were given Administrative
>>> rights (at the domain level, all users are part of the administrator
>>> grp Domain Administrators)
>>> I don't think this is such a great idea, so I want to remove them
>>> from this grp so they are members only of the Domain Users grp--This
>>> is the standard way a network is setup, I believe.....
>>
>> Absolutely!!!
>>>
>>> You probably know that a member of the domain administrators grp
>>> by default is given administrator rights to the local XP computer
>>> they are logged into. So, right now, they are administrators of the
>>> local pc as well as the network.
>>>
>>> My problem is this. When I remove them from the domain
>>> administrators grp, WP does not work correctly,e.g.-there are
>>> certain functions that no longer work (spell check for one) When I
>>> put them back into the Admin grp, then everything works again.....
>>
>> If absolutely necessary, you can add Domain Users to the local
>> administrators group on each computer. Maybe do that right now, and
>> then when you have more time, troubleshoot the WP issue - maybe
>> check their support site to figure out what they need right to.
>> Would PowerUsers do it? Etc etc etc.
>>
>>>
>>> there must be a rights issue then on the local machine......?
>>>
>>> But why? A standard network user does not have domain admin
>>> rights........
>>
>> Absolutely true.
>>
>>> No doubt, WP was installed by a user with domain
>>> rights, but still, why is it needing admin rights to operate?
>>
>> Because it's written badly? That's the usual culprit. Still, as
>> mentioned above, if they have *local* admin rights, it ought to work
>> - domain admin is WAAAAY overkill and a bad idea.
>>
>>> What can I do to fix it?
>>> Where should I even start to look?
>>> My next step when next Im there, is to add the network user as a
>>> user on the local machine with admin rights (this will make him a
>>> admin for the local PC, but not for the network) and see what this
>>> does.........
>>>
>>> I suspect that things will then work correctly again, but that is
>>> not a solution...
>>
>> Agreed. But it will buy you some time.
>>>
>>>
>>> Any insights or comments, or outright solutions would be greatly
>>> appreaciated..
>>>
>>> If anyone knows of a better place to ask this question, I would
>>> appreaciate that info too.....
>>>
>>> I'm grasping at straws,,, ANY thoughts.....



Relevant Pages

  • Re: DirecTV: My horror story
    ... systems, alarms, home theaters, and home networks. ... He'll install either, but he hates having to do it. ... because when it goes bad, they call him, not the dish folks. ...
    (rec.sport.golf)
  • Re: DirecTV: My horror story
    ... systems, alarms, home theaters, and home networks. ... He'll install either, but he hates having to do it. ... because when it goes bad, they call him, not the dish folks. ...
    (rec.sport.golf)
  • Re: DirecTV: My horror story
    ... systems, alarms, home theaters, and home networks. ... He'll install either, but he hates having to do it. ... because when it goes bad, they call him, not the dish folks. ...
    (rec.sport.golf)
  • GPO to install applications on workstations
    ... -I would like to know if i can set a GPO to allow or deny access to install ... applications locally on workstations based on users rights to do it. ...
    (microsoft.public.windows.group_policy)
  • Re: software installation rights..
    ... could them elevate permissions during the install -or- you could just ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >i also want to give some users rights to install selected softwares on ...
    (microsoft.public.windows.server.active_directory)