RE: Users and Groups



Hi Tonky,

Thanks for your reply.

To narrow down the problem, please create a local administrator (not domain
user) and logon to the client workstation locally, and then try to install
some applications, especially local software such as printer driver, is
there any issue?

Please try to alter the GPO on client computer first and collect the
gpresult from the problematic client computer.

Thanks for your time and I look forward to hearing from you.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Users and Groups
| | From: "=?Utf-8?B?VG9ua3k=?=" <Tonky@xxxxxxxxxxxxxxxxxxxxxxxxx>
| | Subject: RE: Users and Groups
| Date: Thu, 1 Dec 2005 03:36:02 -0800
| | Newsgroups: microsoft.public.windows.server.sbs
| |
| Hi Crina
|
| Thanks for your reply and in response to your questions, please find
details
| below.
|
| 1. All operators are memebers of the Domain User group added via the User
| Template of the Users and Computers Wizard.
|
| All operators are added as Local Administrators on their workstation and
any
| other workstation they are likely to use.
|
| 2. The situation occurs for all users (except Domain Admins) and
computers
| and for all SBS systems I've installed out of the box.
|
| 3. Any software, ie MS Office, Sync software for PDA's, printer drivers,
| etc, even Server assigned Apps applied via Users and Computers on SBS.
|
| The errors are various, but usually associated with inability to install
| certain elements of the software. Always need to log in under Domain
| Administrator account, Local Administrator (as the Domain Administrator)
or
| use Run as: Local Administrator (as the Domain Administrator).
|
| 4. I will alter the GPO on my next visit (would this be on the
workstations?)
|
| Thanks
|
| Tonky
| --
| Always hands on and keen to learn.
|
|
| ""Crina Li"" wrote:
|
| > Hi Tonky,
| >
| > Thank you for posting in SBS newsgroup.
| >
| > From the description, I understand the issue to be: the user who has
the
| > Local Administrator rights on client computer can not install software
on
| > client computer. If I have misunderstood your concerns, please do not
| > hesitate to let me know.
| >
| > To narrow down the problem, would you please help me collect the
following
| > information?
| >
| > 1. Double confirm if you have added the users using Add Users and
Computers
| > wizard on SBS and if you have added the users to the local
administrator
| > group of the computer. You can check if the domain user is the local
| > administrator as following:
| >
| > 1) On client computer, open Control Panel and then click User Accounts.
| > 2) Double click User Accounts and check if the user is a member of
Local
| > Administrators
| >
| > 2. Does the situation occur on all domain users and all client
computers?
| > 3. What is the software you have installed and what is the detailed
error
| > message when you install the software using domain user? Does the
situation
| > occur on all the software you want to install?
| > 4. Please try to add the domain user to the following policy to see how
| > thing goes:
| >
| > 1) Click Start | Run.
| > 2) Input gpedit.msc and then click OK.
| > 3) Expand Computer Configuration | Windows Settings | Local Policies.
| > 4) Click User Rights Assignment and then double click Load and unload
| > device drivers in right pane.
| > 5) Add the domain user and then try again.
| >
| > 5. Please help to collect the gpresult from the problematic client
computer
| > for further troubleshooting. Please refer to the following command
| >
| > gpresult /v > c:\gpresult.txt
| >
| > Please send the gpresult.txt under your C directory to me at
| > v-crinal@xxxxxxxxxxxxx
| >
| > Thanks for your time and I look forward to hearing from you.
| >
| > Best regards,
| >
| > Crina Li (MSFT)
| >
| > Microsoft CSS Online Newsgroup Support
| >
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| > This newsgroup only focuses on SBS technical issues. If you have issues
| > regarding other Microsoft products, you'd better post in the
corresponding
| > newsgroups so that they can be resolved in an efficient and timely
manner.
| > You can locate the newsgroup here:
| > http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
| >
| > When opening a new thread via the web interface, we recommend you check
the
| > "Notify me of replies" box to receive e-mail notifications when there
are
| > any updates in your thread. When responding to posts via your
newsreader,
| > please "Reply to Group" so that others may learn and benefit from your
| > issue.
| >
| > Microsoft engineers can only focus on one issue per thread. Although we
| > provide other information for your reference, we recommend you post
| > different incidents in different threads to keep the thread clean. In
doing
| > so, it will ensure your issues are resolved in a timely manner.
| >
| > For urgent issues, you may want to contact Microsoft CSS directly.
Please
| > check http://support.microsoft.com for regional support phone numbers.
| >
| > Any input or comments in this thread are highly appreciated.
| >
| > =====================================================
| >
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| > --------------------
| > | Thread-Topic: Users and Groups
| > || From: "=?Utf-8?B?VG9ua3k=?=" <Tonky@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Users and Groups
| > | Date: Wed, 30 Nov 2005 13:33:04 -0800
| > | | Newsgroups: microsoft.public.windows.server.sbs
| > | |
| > | Hi all
| > |
| > | I am curious to understand why users set up on an SBS 2003 Domain
under
| > the
| > | standard User Template, but given Local Administrator rights on the
| > | workstations are not permitted to install software. This is
frustrating
| > as a
| > | consultant who manages a number of SBS systems I am called in every
time
| > one
| > | of our SBS customers needs to install something.
| > |
| > | As a Domain Admin, I automatically get Local Admin rights and
| > installations
| > | work okay for me. I have looked at GP to find how to switch this off,
but
| > | can't find it.
| > |
| > | Pleas help
| > |
| > | Thanks
| > |
| > | Tonky
| > | --
| > | Always hands on and keen to learn.
| > |
| >
| >
|

.



Relevant Pages

  • Re: domain workstation account for software install
    ... Do you mean as a "domain administrator" or a "local administrator on the ... just on the target workstation: ... Server Management | Standard Management | Security ... have "install" permissions. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2003 CSW w/Roaming profiles and NO Local Admin
    ... the user must has local administrator permission. ... bypass this step if we want to distribute the apps by CSW. ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Users and Groups
    ... Thank you for posting in SBS newsgroup. ... Local Administrator rights on client computer can not install software on ...
    (microsoft.public.windows.server.sbs)
  • RE: Local administrator rights on client machine
    ... we will join the domain uses to local administrator ... you can do it by script. ... Please understand that Scripting is not supported in partner newsgroup. ... you may want to contact Microsoft CSS directly. ...
    (microsoft.public.windows.server.sbs)
  • RE: Lost local admin credentials
    ... Thank you for posting in SBS newsgroup. ... there is no local Administrator account on a DC so I am confused ...
    (microsoft.public.windows.server.sbs)

Loading