Re: Permissions for users

Tech-Archive recommends: Fix windows errors by optimizing your registry

I appreciate your comments. After looking at a few other posts to this NG,
I wonder if I can use the server to remotely install the programs they want.
Can the Help file in SBS "walk" me through this, or answer my question?

Mike

"Andrew M. Saucci, Jr." <spam-only@xxxxxxxxxxxxxxxx> wrote in message
news:eicjfEYOFHA.3380@xxxxxxxxxxxxxxxxxxxxxxx
> I have bad news. There is no single answer to this question. The
> answers vary depending upon exactly which program you need to install. The
> closest you can come to a single answer is to make every domain user
> account
> an administrator account on each workstation-- but that is like borrowing
> money on a credit card at 25% interest to buy groceries. The bill comes
> due
> later in the form of workstations infested with adware, spyware, trojans,
> viruses, and worms. You have to invest the time either now (by assigning
> appropriate permissions manually) or later (by adware/spyware cleanup and
> general loss of control over the workstations). I got sick of cleaning
> trash
> off workstations, so I now prefer to reserve administrator privileges for
> myself and set the permissions the way the installations should have set
> them in the first place. Go to www.sysinternals.com and grab yourself
> copies
> of RegMon and FileMon. These will be indispensible in troubleshooting
> flaky
> programs that don't run properly without administrator privileges.
>
> When the users complain, explain that running applications under
> an administrator account is like leaving one's car by the side of the road
> unlocked with the keys in the ignition. I believe that end-users will
> eventually demand security when they get sick of seeing people spending
> hours on end cleaning and repairing workstations-- just as the crank on
> the
> front of the car is rightly seen as antiquated today. Use some finesse and
> heap piles of sympathy on them, but stick to your guns. No local
> administrators. The bottom line is that the days of users installing
> applications are coming to an end, unless application vendors fix their
> programs so that a user running temporarily with an admininstrator account
> can install them and then switch back to ordinary user privileges with no
> trouble.
>
> "Mike Webb" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message
> news:ufIIE2sNFHA.3984@xxxxxxxxxxxxxxxxxxxxxxx
>> Using SBS 2003 in a WinXP LAN for a small (8 employee) non-profit. SBS
>> recently installed by vendor, so my skills are minimal but improving.
>> ====================
>> The staff has expressed a lot of frustration with their inability to
> install
>> programs. We'd had nothing more than a P2P network for the last 15
>> years.
>> Since I got SBS installed and ordered new computers for some of the
>> staff,
>> they've found that they can't install programs. I've boosted them from
> User
>> to Power User, thinking that would do the trick, but no-go. I made them
> all
>> Admins of their local machine only, thinking they can login to the
> machine,
>> install the program, add their domain account to the authorized users
>> list
>> in Properties, and that would let them use the program. Didn't work.
> Tried
>> copying over the shortcuts from the machine account to the domain account
> in
>> Documents and Settings - got an error that leads me to think there's a
>> problem with the registry and how it rel;ates the program to the person
>> logged in.
>>
>> The programs they want to install are all for their work and research.
> I'm
>> kinda stumped and am wary of experimenting with GPO's or permissions as I
>> don't want to unwittingly dig myself into a hole. I'm sure there's an
>> answer out there ..... comments? thoughts?
>>
>> --
>> Mike Webb
>> Platte River Whooping Crane Maintenance Trust, Inc.
>> a 501 (c)(3) organization
>>
>>
>
>


.

Relevant Pages

  • Re: TrendMicro Installation Advice
    ... Here's the procedure for Trend CSM for SMB. ... another account. ... Run setup - install on IIS is generally the only selection available. ... Accept the client installation for the SBS (installs the Officescan ...
    (microsoft.public.windows.server.sbs)
  • Re: administrators password
    ... For Windows 2000: Install Windows 2000 after XP is installed. ... Administrator Account on the Welcome Screen. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Help! Adobe support created administrator crisis
    ... You will need to boot into Safe Mode to log on with the built-in System Administrator account. ... a new user to install Adobe PS Elements. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Advanced Client install nightmare
    ... I can successfully install manually using the SMS account. ... MS Client Configuration Manager cannot install the Advanced Client to ...
    (microsoft.public.sms.admin)
  • Re: userName="machine" didnt work
    ... Juan, ... version) than the .42 dlls. ... Deleted the ASPNET account from "Local Users and Group – ... ASPNET user and allowed the ASP.NET install to re-create it. ...
    (microsoft.public.dotnet.framework.aspnet)