Server 2003 Permissions problems

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Bob Rissler (bobr_at_sptnetpower.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 11:43:36 -0500

This is a rather annoying problem that I am facing that is problem really
simple. Any help would be greatly appreciated.

Here it is. I would like a user to have full 'Program' access to a particular
computer but not to have this access elsewhere in the company. I want the
user to be able to install and run all programs on his local computer without
making him a domain admin. If he were simply logging onto his local machine I
could make an account that was a 'Power User' and all would be well. But...
the problem here is that he is logging onto a Windows Server 2003 domain
controller. Because of this there is no local account for him specifically.
Is there a way to grant him full local access without giving him domain admin
access?

Thanks,
Bob

Relevant Pages

  • Re: Server 2003 Permissions problems
    ... If he were simply logging onto his local machine I ... >controller. ... Because of this there is no local account for him specifically. ... >Is there a way to grant him full local access without giving him domain admin ...
    (microsoft.public.windows.server.networking)
  • Permission problems - Please help
    ... If he were simply logging onto his local machine ... Is there a way to grant him full local access without giving him domain admin ... admin and Quickbooks keeps on saying that the user must have certain ... privileges on the computer for the program to be able to run. ...
    (microsoft.public.windows.server.general)
  • Re: Can not have domain priviledges on one XP pro computer on my n
    ... try turning off fast logon - See: ... to add the user or domain admin accout to the ACL of any folder or drive I ... only get the option to select users from the local computer ... >> Doug Sherman ...
    (microsoft.public.windowsxp.network_web)
  • Re: RDP/TS GPO Settings - Users unable to logon
    ... If you have created these userspeople with domain admin privilege ... Most likely the helpdesk guys are logging on to a domain controller. ... Others will be denied because they are not allowed to logon locally ... Local Policies --> User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Modeling Wizard - Access Denied
    ... I get an access denied/insufficient permissions message. ... domain admin access so that's not an option. ... Read & allow planning and logging would cover me but obviously not. ...
    (microsoft.public.windows.server.active_directory)