Re: Local Administrators

From: Frank McCallister (anonymous)
Date: 06/19/04 

Date: Sat, 19 Jun 2004 13:27:30 -0500

Hi Andy

That is not correct. When you connectcomputer the first time you logon as
Administrator and select the Computer you are joining. You then add the
Users who are going to use that Workstation. After completing the Wizard on
the second reboot you login as Domain Administrator so that the Client apps
will be Downloaded and installed. After that any user who was selected can
logon without Admin rights and use those programs. Unfortunately they will
get a bogus warning about rights on the first use but Outlook will Open and
Setup correctly. Also unfortunately there are some rogue programs like MYOB
and others which insist on Admin rights but that is another story.

Frank McCallister
COMPUMAC
"Andy" <andy.baguley@cwcom.net> wrote in message
news:%23$6mlgiVEHA.3428@TK2MSFTNGP12.phx.gbl...
> Michael
>
> I wish you well.
>
> It will mean you have to log on to every client, as every anticipated
> user,
> and them presumably demote them afterwards.
>
> If a new user then comes into the org, you have to set them up on each
> client they are likely to use first.
>
> It's begining to defeat the point of central management from a server !!!!
>
>
> "Harlequin" <michael.mason@arraspeople.co.uk> wrote in message
> news:OxyFWciVEHA.2700@TK2MSFTNGP10.phx.gbl...
>> Andy
>>
>> as a workaround I have decided to configure all PCs myself before they
> enter
>> the domain.
>>
>> this of-course is an impractical solution for some but I am only going to
> be
>> setting up maybe 10 PCs at most (I hope).
>>
>> -----------------------------
>> Michael Mason
>> Arras People
>> www.arraspeople.co.uk
>> -----------------------------
>>
>> "Andy" <andy.baguley@cwcom.net> wrote in message
>> news:%23S$GSUiVEHA.1048@tk2msftngp13.phx.gbl...
>> > During the client install it became apparent that all users had to be
>> > members of the local admin group to effect the "first time" prog
>> > install
>> of
>> > client apps.
>> >
>> > This then leaves them free to do virtually anything to the client!!!!!
>> >
>> > Is this by design, and can I demote them after the first run to
>> > preserve
>> > some semblance of client standardisation and reliability?
>> >
>> >
>> >
>>
>>
>
>

Relevant Pages

  • Re: Unable to logon thru Terminal Services
    ... Nat shouldn't matter, becasue you can logon with the administrator account, ... which mean you client side network setting is correct. ... > Domain Users ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator Logon
    ... right click on Administrator and say "Set Password". ... friendly logon and prompt for a password on startup. ... your own user with admin rights, password protect the account, and then use ... > This is my home computer. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Change jpg file type for power user
    ... I can make changes as administrator on the client, ... admin rights to users, but I keep running into roadblocks like this. ... Jpg files are not associated with a program. ...
    (microsoft.public.windows.server.sbs)
  • Re: a way to set source for capinst.exe?
    ... really put MPs by the clients unless the clients are located in SMS sites. ... >> client push installation). ... >>> Put logic in your logon script to determine who should get the advanced ... when we setup a new PC is a tech with admin rights. ...
    (microsoft.public.sms.admin)
  • Re: Cannot copy one particular user
    ... Logon as Administrator (not user with admin rights) and see ... "Perry" wrote in message ...
    (microsoft.public.windowsxp.security_admin)