Re: After join PC to domain, local user capability very limited!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Keith (anonymous_at_discussions.microsoft.com)
Date: 05/17/04 

Date: Mon, 17 May 2004 06:41:42 -0700

Thanks, but that's not really clear.

When I look at the user on the local computer, he still
shows as an administrator. I don't see how I can change
domain capability from the local PC.

The Client Setup Wizard message is "You must be a member
of the local administrators security group on this
computer to configure applications. Contact your network
administrator".

Tried elevating all the Domain Users to Power users using
the SBS user tool and logging in again but no help.
Still can't even control power properties (e.g. don't go
into standby) as a local user.

Keith
>-----Original Message-----
>Lo on to workstation as administrator of the domain. Go
to control
>panel and Users. Add a user looking in the domain not
the workstation.
>Make them a slightly elevated user like a power user. Or
it might be
>right clicking My Computer/manage/users.
>
>"Keith" <anonymous@discussions.microsoft.com> wrote:
>
>>Domain security newbie question...
>>
>>After the Windows XP computers joins the domain
(logging
>>in with their regular user name, set up according to
the
>>standard SBS user profile), I get a message box (sorry
>>exact text not available at this moment).
>>
>>Upshot of the message is that the end user no longer
have
>>local adminstrator capabilities and may not change
>>certain system settings (check this box not to see this
>>message again).
>>
>>I can't see anything obvious to change in security to
fix
>>this.
>>
>>And indeed their capabilities are extremely limited --
>>can't change power properties for example.
>>
>>Anyone know how to restore the local user's power over
>>their own PC setups without giving them high power
>>elsewhere (e.g. domain adminstration)?
>>
>>I'm guessing that something would have been done to
take
>>care of this in the http://server/ConnectComputer but
am
>>not in a positition where that will run again.
>>Am wondering whether a specific netdom.exe command
could
>>fix this???
>>Thanks!
>
>Jim B. SBS MVP
>remove the mvp to send email
>.
>

Relevant Pages

  • Re: Power options
    ... | Why can't I set the power options for the administrator ... | options under my name as the administrator. ... Power Options are not a system-level computer setting. ... a per-user registry setting just like desktop settings (such as ...
    (microsoft.public.windowsxp.customize)
  • RE: Templates Problem
    ... However you also want the Power ... Users who do not have Administrator permission to access the Program. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Power Management in XP Professional SP2
    ... when you temporarily make a user member of the Administrator group and make changes to the Power Options they should stick and work after you remove the administrator rights. ... This does work when user belongs to local admin group but does not when user is taken out of local admin group. ...
    (microsoft.public.windowsxp.general)
  • RE: Local logon denied
    ... To better understand this user behavior, may I ask the reason you add Power ... User to the administrator? ... Microsoft SBS Product Support ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.sbs)