Re: Client Setup Wizard Error

If you use the ConnectComputer wizard to join the workstation to the domain
and set up the local (peer-to-peer) users as domain users, those local users
are automatically made members of the local administrators group after
joining the domain. You can leave them this way or reduce their permissions
for added security.

After joining domain, Users have become local admins
http://groups.google.com/group/microsoft.public.windows.server.sbs/browse_thread/thread/cb0f073c36c9ba36/2a56987c19e7871b?lnk=st&q=connectcomputer+all+users+local+admin&rnum=18&hl=en#2a56987c19e7871b

If you manullay join the workstations to the domain, you must manually
elevate the permissions of all domain users of that workstation to "local
administrator" status to get them set up properly. Then they can be
downgraded.

--
Merv Porter [SBS-MWP]
============================

"GaileForce" <GaileForce@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:C1C534D4-B9EC-474A-99D7-3D6E97BA1791@xxxxxxxxxxxxxxxx
Thanks Merv.

Is this a work-a-round or the way it is suppossed to be in all SBS
installations? I understood that this can be used to deliver
applications.
How can that work unless all users are Local Administrators at all times?

I appreciate you can stop the message from being displayed using the
checkbox, but I'm concerned that something is not working properly.


"Merv Porter [SBS-MVP]" wrote:

The initial setup of the user should be done as a local admin. After
that,
log him out, then remove him for the local admin group on the
workstation.
On subsequent logins he will get the "You must be a member of the local
administrators security group..." message, which he can dismiss
permanently
by checkmarking the "Do Not Show Again" box in the message.

--
Merv Porter [SBS-MWP]
============================


"GaileForce" <GaileForce@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BF4E3A92-3CBB-4FA2-BB1B-49482AB8D0FF@xxxxxxxxxxxxxxxx
Hi,

Can someone please confirm something for me. When running a SBS2003
network, do all users logging on to the clients need to be local
administrators in order for the SBS_Login_script.bat and the
<server>\clients\setup\setup.exe /s <Server> call to work. I have one
new
user that whenever they log on, they get a "You must be a member of the
local
administrators security group on this computer to install and configure
applications. Contact your network administrator".

I have seen various posts with a similar error and people have
suggested
"Trying" a local administrator option. However I wonder is this is a
requirement that all users must be local administrators in SBS2003.

Thanks in advance.






.

Relevant Pages

  • Re: SBS 2003 Premium Setup of end users.
    ... local machine Administrators. ... particular workstation remove them from the local Admin group on that ... After the initial setup, those permissions are not needed and the ... computer which is the current Workstation1 unit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Must all users be administrators?
    ... What I am upset about is the extensive use of the administrators ... group on the local workstation. ... > permissions to control, just read permissions. ... If it's a folder, you can ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium Setup of end users.
    ... In the Local Users & Groups | Groups | Administrators ... I saw an entry for domain users and I deleted it. ... SBS needs a user to have local admin permissions on the workstation to ... That hard drive currently resides on the Workstation1 unit as a spare ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to add domain user or groups
    ... Check the DNS settings on an affected workstation. ... administrators cannot perform windows update except if logged in as ... That said, since you've got AD, why do this at the workstation anyway? ...
    (microsoft.public.windowsxp.security_admin)
  • Domain Admins cant manage computers
    ... For some reason I am having some bizard security problem ... computer and connect to the destination workstation, ... properties of group Administrators on computer XXX: ... Of course my account is a member of Domain Admins, ...
    (microsoft.public.win2000.security)