RE: Power Users change?


Hi,

Thanks for posting!

By default, the rights and permissions that are granted to the Power Users
group include those rights and permissions that are required to allow
members of the Power Users group to modify computer-wide settings, to
install drivers, and to run (or install) non-certified programs. For
example, a member of the Power Users group could install a malicious
program or a DLL, and then cause the administrator or a system service to
run the malicious program or the DLL. By using this technique or other
techniques, the member of the Power Users group may be able to gain
additional rights and permissions on your computer, including complete
administrative credentials.

For more detailed information, please refer to the following article:
825069 A member of the Power Users group may be able to gain administrator
http://support.microsoft.com/?id=825069

For more information, please refer to the following article:
278874 Power Users Cannot Install Programs in Windows 2000 Professional
http://support.microsoft.com/?id=278874

149091 Power Users Can Modify Common Groups
http://support.microsoft.com/?id=149091

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| From: "Upgrader" <ucan.kissmyass@xxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.migration
| Subject: Power Users change?
| Date: 5 May 2005 13:46:52 -0700
| Organization: http://groups.google.com
| Lines: 4
| Message-ID: <1115326011.842566.92990@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>
| NNTP-Posting-Host: 57.68.10.193
| Mime-Version: 1.0
| Content-Type: text/plain; charset="iso-8859-1"
| X-Trace: posting.google.com 1115326018 4355 127.0.0.1 (5 May 2005
20:46:58 GMT)
| X-Complaints-To: groups-abuse@xxxxxxxxxx
| NNTP-Posting-Date: Thu, 5 May 2005 20:46:58 +0000 (UTC)
| User-Agent: G2/0.2
| Complaints-To: groups-abuse@xxxxxxxxxx
| Injection-Info: f14g2000cwb.googlegroups.com; posting-host=57.68.10.193;
| posting-account=X-iCvA0AAACWtyPoKBdUjjIZ0yNgL6mm
| Path:
TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onli
ne.de!border2.nntp.dca.giganews.com!nntp.giganews.com!newshosting.com!nx01.i
ad01.newshosting.com!news.glorb.com!postnews.google.com!f14g2000cwb.googlegr
oups.com!not-for-mail
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:10036
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| >From an NT4 network to a Windows 2003 AD how does this change the
| rights of power users on PCs? It appears they can do more like install
| applications check tcpip settings.
|
|

.

Relevant Pages

  • Re: Allow user to run application as a power user
    ... > the system context that makes the current logged on user a member of the ... > Finally, after the application is complete, the script, under the system ... > Since we don't normally allow membership in the power users group, ...
    (microsoft.public.scripting.vbscript)
  • Re: All users printers showing up on terminal server
    ... This is not the case for you since your application will run okay with Power Users membership. ... A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP ... When the users log onto TS all the redirected printers are show on the ...
    (microsoft.public.windows.terminal_services)
  • Re: Local Computer Access In AD
    ... Not if you use the Restricted Group through a GPO method ... You can put "interactive" in the Power Users this ... You need to first catalogue what specific privileges ... Add the user to the Power Users group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Computer Access In AD
    ... You need to first catalogue what specific privileges ... users can install their own programs. ... Add the user to the Power Users group. ...
    (microsoft.public.windows.server.active_directory)
  • Win2k Pro Local Groups
    ... Pro on them in a NT4 environment (no Win2k servers, ... access to install when they're in the Power Users group. ...
    (microsoft.public.win2000.security)