Re: Server 2003 Permissions problems

From: Jeff Cochran (jcochran.nospam_at_naplesgov.com)
Date: 03/19/04 

Date: Fri, 19 Mar 2004 20:50:31 GMT

On Fri, 19 Mar 2004 11:43:36 -0500, "Bob Rissler"
<bobr@sptnetpower.com> wrote:

>This is a rather annoying problem that I am facing that is problem really
>simple. Any help would be greatly appreciated.
>
>Here it is. I would like a user to have full 'Program' access to a particular
>computer but not to have this access elsewhere in the company. I want the
>user to be able to install and run all programs on his local computer without
>making him a domain admin. If he were simply logging onto his local machine I
>could make an account that was a 'Power User' and all would be well. But...
>the problem here is that he is logging onto a Windows Server 2003 domain
>controller. Because of this there is no local account for him specifically.
>Is there a way to grant him full local access without giving him domain admin
>access?

Make his domain account a member of the local admins or power users
groups. Basic user/group/resource permissions dance.

Jeff

Relevant Pages

  • Server 2003 Permissions problems
    ... user to be able to install and run all programs on his local computer without ... If he were simply logging onto his local machine I ... Because of this there is no local account for him specifically. ... Is there a way to grant him full local access without giving him domain admin ...
    (microsoft.public.windows.server.networking)
  • Permission problems - Please help
    ... If he were simply logging onto his local machine ... Is there a way to grant him full local access without giving him domain admin ... admin and Quickbooks keeps on saying that the user must have certain ... privileges on the computer for the program to be able to run. ...
    (microsoft.public.windows.server.general)
  • Re: RDP/TS GPO Settings - Users unable to logon
    ... If you have created these userspeople with domain admin privilege ... Most likely the helpdesk guys are logging on to a domain controller. ... Others will be denied because they are not allowed to logon locally ... Local Policies --> User Rights Assignment ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Modeling Wizard - Access Denied
    ... I get an access denied/insufficient permissions message. ... domain admin access so that's not an option. ... Read & allow planning and logging would cover me but obviously not. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy Modeling Wizard - Access Denied
    ... I get an access denied/insufficient permissions message. ... domain admin access so that's not an option. ... Read & allow planning and logging would cover me but obviously not. ...
    (microsoft.public.windows.server.active_directory)