Programs and Group Policies

From: Robert (bob_at_bob.net)
Date: 10/05/04 

Date: Mon, 4 Oct 2004 21:14:45 -0500

SBS 2003, client Windows XP Pro SP1

The client pc was setup on a workgroup then added to the domain.

Originally my problem began with running a program as any other user other
than the local administrator. The folder where the software is located is
shared with full control permissions for everyone as the software vendor
instructed. The Domain Admin could not run the program, locally. Adding
the Domain Admin to the user list locally did not work either. That got me
thinking the GP has something to do with it, the computer just doesn't know
that the domain admin is the same as the local admin. So, I removed the
computer from the network on the server and then added it back. No luck.
I've changed the name of the computer, created a new computer account and
added it back with no luck either.

Then only to confuse things further I logged in using Terminal Services with
any user with Terminal Services privileges. The program ran just fine. Or
if I right click on the desktop icon for the program then selected run as..
and used the local admins credentials it ran just fine.

I don't have any really strict domain policies in place, in fact I think
they are the standard out of the box policies. I have a copy of the
Group Policy Results Query should anyone need it.

I'm on the verge of going bald pulling my hair out. Any one have any ideas
or experience this before?

Robert

Relevant Pages

  • Re: Uable to add a network printer
    ... Tried to log-on as 'local admin' and as 'domain admin'. ... > Hi Sjaak, ... >> I attached the computers to the network using the "Set Up Computer ...
    (microsoft.public.windows.server.sbs)
  • Unjoining from the domain
    ... and browse the network. ... the domain admin with same error. ... I log in to the pc with the local admin and try to unjoin ...
    (microsoft.public.windows.server.general)
  • Re: Administrator--Client installation account problem
    ... I have most of the services attached with the Domain Admin account, ... You do not have to be in advanced security to push the client. ... > account needs to be a local admin on the client machines.) ...
    (microsoft.public.sms.admin)
  • Re: User account to run WSUS under
    ... I suppose you could log on as the local admin account, I'm not sure what that gives you, since the domain admin is also a member of the local admin's group...still a highly priviledged user account and group membership... ... Can I install WSUS 3.0 by logging onto my SBS machine as a local admin? ...
    (microsoft.public.windows.server.sbs)
  • Domain Admin cannot run program
    ... client Windows XP Pro SP1 ... The Domain Admin could not run the program, ... I don't have any really strict domain policies in place, ... I have a copy of the Group Policy Results Query should anyone need it. ...
    (microsoft.public.windowsxp.help_and_support)