RE: Users and Groups



Hi Crina

Thanks for your reply and in response to your questions, please find details
below.

1. All operators are memebers of the Domain User group added via the User
Template of the Users and Computers Wizard.

All operators are added as Local Administrators on their workstation and any
other workstation they are likely to use.

2. The situation occurs for all users (except Domain Admins) and computers
and for all SBS systems I've installed out of the box.

3. Any software, ie MS Office, Sync software for PDA's, printer drivers,
etc, even Server assigned Apps applied via Users and Computers on SBS.

The errors are various, but usually associated with inability to install
certain elements of the software. Always need to log in under Domain
Administrator account, Local Administrator (as the Domain Administrator) or
use Run as: Local Administrator (as the Domain Administrator).

4. I will alter the GPO on my next visit (would this be on the workstations?)

Thanks

Tonky
--
Always hands on and keen to learn.


""Crina Li"" wrote:

> Hi Tonky,
>
> Thank you for posting in SBS newsgroup.
>
> From the description, I understand the issue to be: the user who has the
> Local Administrator rights on client computer can not install software on
> client computer. If I have misunderstood your concerns, please do not
> hesitate to let me know.
>
> To narrow down the problem, would you please help me collect the following
> information?
>
> 1. Double confirm if you have added the users using Add Users and Computers
> wizard on SBS and if you have added the users to the local administrator
> group of the computer. You can check if the domain user is the local
> administrator as following:
>
> 1) On client computer, open Control Panel and then click User Accounts.
> 2) Double click User Accounts and check if the user is a member of Local
> Administrators
>
> 2. Does the situation occur on all domain users and all client computers?
> 3. What is the software you have installed and what is the detailed error
> message when you install the software using domain user? Does the situation
> occur on all the software you want to install?
> 4. Please try to add the domain user to the following policy to see how
> thing goes:
>
> 1) Click Start | Run.
> 2) Input gpedit.msc and then click OK.
> 3) Expand Computer Configuration | Windows Settings | Local Policies.
> 4) Click User Rights Assignment and then double click Load and unload
> device drivers in right pane.
> 5) Add the domain user and then try again.
>
> 5. Please help to collect the gpresult from the problematic client computer
> for further troubleshooting. Please refer to the following command
>
> gpresult /v > c:\gpresult.txt
>
> Please send the gpresult.txt under your C directory to me at
> v-crinal@xxxxxxxxxxxxx
>
> Thanks for your time and I look forward to hearing from you.
>
> Best regards,
>
> Crina Li (MSFT)
>
> Microsoft CSS Online Newsgroup Support
>
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> This newsgroup only focuses on SBS technical issues. If you have issues
> regarding other Microsoft products, you'd better post in the corresponding
> newsgroups so that they can be resolved in an efficient and timely manner.
> You can locate the newsgroup here:
> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>
> When opening a new thread via the web interface, we recommend you check the
> "Notify me of replies" box to receive e-mail notifications when there are
> any updates in your thread. When responding to posts via your newsreader,
> please "Reply to Group" so that others may learn and benefit from your
> issue.
>
> Microsoft engineers can only focus on one issue per thread. Although we
> provide other information for your reference, we recommend you post
> different incidents in different threads to keep the thread clean. In doing
> so, it will ensure your issues are resolved in a timely manner.
>
> For urgent issues, you may want to contact Microsoft CSS directly. Please
> check http://support.microsoft.com for regional support phone numbers.
>
> Any input or comments in this thread are highly appreciated.
>
> =====================================================
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> --------------------
> | Thread-Topic: Users and Groups
> || From: "=?Utf-8?B?VG9ua3k=?=" <Tonky@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | Subject: Users and Groups
> | Date: Wed, 30 Nov 2005 13:33:04 -0800
> | | Newsgroups: microsoft.public.windows.server.sbs
> | |
> | Hi all
> |
> | I am curious to understand why users set up on an SBS 2003 Domain under
> the
> | standard User Template, but given Local Administrator rights on the
> | workstations are not permitted to install software. This is frustrating
> as a
> | consultant who manages a number of SBS systems I am called in every time
> one
> | of our SBS customers needs to install something.
> |
> | As a Domain Admin, I automatically get Local Admin rights and
> installations
> | work okay for me. I have looked at GP to find how to switch this off, but
> | can't find it.
> |
> | Pleas help
> |
> | Thanks
> |
> | Tonky
> | --
> | Always hands on and keen to learn.
> |
>
>
.



Relevant Pages

  • Re: SBS Network Configuration Wizard
    ... on sbs 2003. ... "The list of users and computers cannot be found. ... DCHP server I realised that the option for installing the DNS was there. ... During install, I had chosen the router as ...
    (microsoft.public.windows.server.sbs)
  • Re: transition to sbs2003 R2 from sp1
    ... With that number of users and computers, I would certainly use swing migration from www.sbsmigration.com. ... Moves all your stuff from old server to new server without your having to touch the workstations, including the AD, Exchange, and all the shares and permissions. ... SBS 2008 with downgrade may be an option, SBS 2008 now is just too much of a quantum leap right now. ... If it is not OEM License, you could install on new hardware, add all the service packs, and either move the data, migrate the settings, or restore from backup. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS problems
    ... >I think your best bet would be to follow the SBS backup_restore document - ... > Once you go with an SBS install you are a new domain, ... >> SBS 2K3 installed on Dell server. ... The computers do not ...
    (microsoft.public.windows.server.sbs)
  • Re: Workstations cannot connect to server
    ... How did you create users prior to the install of SBS 2003? ... Migrating Windows Small Business Server 2003 to New Hardware ... How to install Small Business Server 2003 in an existing Active Directory ... If you have somehow gotten computers into the domain, ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 newbie- question
    ... If you can't remember what was used initially, for the local administrator ... (username/pwd combination), ... Les Connor [SBS Community Member - SBS MVP] ... >>> Looks like an install of XP in my future? ...
    (microsoft.public.windows.server.sbs)