Re: SBS 2003 XP Client SP2 add new user with user rights cant use



If you used Connect Computer, the targeted domain user was added to the
local administrators group even though his/her domain account only had
(domain) User privileges. This allows the user's account to set up all the
Client Apps on the workstation when they log in. Anyone else who logged
onto the workstation after that would not be a local admin by default. You
may want to look at the local adminitrators group and see who is in there.
If you feel comfortable with the users having local admin privileges, you
can add the domain users group to the local administrators group. After
that, anyone who logs onto the workstation will be a local admin. Normally
this isn't desirable because then they have total control over the
workstation.

--
Merv Porter [SBS MVP]
===================================

"mark-docendo" <markdocendo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:18553B43-18DF-4463-AB2B-76A2B5B09204@xxxxxxxxxxxxxxxx
> This will work im sure just tried similar setup seamed ok - What I dont
> understand is the PC had this program on it originally before it was ever
> added to the sbs network and when it was added using the connect computer
> with a user that only had USERS rights the application worked fine but new
> users have this permission problem - did the old user automatically get
> loacal admin privileges even though she was assigned USER privilages from
> the
> server or does the part in the setup where you add an administrators user
> and
> password somehow have something to do with it.
>
> If you could clarify this for me I would be very gratefull.
>
> Thanks - Mark
>
> "Merv Porter [SBS-MVP]" wrote:
>
>> You might need to add the user to the local Power User or local
>> Administrators group on the workstation. You may even be able to click
>> on
>> the security tab for the folder containing the application and add the
>> user
>> to it with full permissions. Sometimes you need to contact the app
>> vendor
>> and ask them what minimum permissions are required to run the app.
>>
>> --
>> Merv Porter [SBS MVP]
>> ===================================
>>
>> "mark-docendo" <markdocendo@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:0658E0E6-D945-498D-B246-97CA921BC02B@xxxxxxxxxxxxxxxx
>> >I always add users using the user template recently member of staff left
>> >and
>> > I added new user at the server then logged onto exixsting PC. Now a
>> > previously installed local application will not run says do not have
>> > permission to open database file - Its something to do with not having
>> > local
>> > admin privilages I believe but what is the best solution still keeping
>> > the
>> > privilages under controll I dont want to give this new user admin
>> > rights
>> > just
>> > to resolve the issue.
>> >
>> > Any ideas
>> >
>> > Thanks - Mark
>>
>>
>>


.



Relevant Pages

  • Re: Local Admin Rights
    ... Sean, ... and find the domain user. ... user to the machine's local Administrators group. ... > Is it possible to add a domain user to the local Admin ...
    (microsoft.public.win2000.security)
  • Adding Domain Users to local Administrator Group
    ... Does anyone know why XP will not let me add a Domain User ... to the local Administrators Group? ... I have logged onto the system as the Local Admin and the ... Domain User Accounts. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Granting Domain Users Local Admin Rights
    ... environment how is giving Domain Users local admin rights insufficient? ... All users getting Local Admin privileges? ...
    (microsoft.public.windowsxp.security_admin)
  • Re: local admin vs group policy and apps...
    ... Administrators without explicitly granting the end user the same privileges. ... local admin vs group policy and apps... ... > We have two apps (even calling them legacy seems to attribute some ... or even given the runas power to run the app can still be ...
    (Focus-Microsoft)
  • RE: Impact of removing administrative rights in an enterpriserunning XP
    ... Impact of removing administrative rights in an enterpriserunning XP ... Impact of removing administrative rights in an enterprise ... Set programs that need to run with administrative privileges to do so. ... For systems where users must have local admin privileges we can set ...
    (Focus-Microsoft)