Re: group policy local/domain users elevated privileges particular

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

The problem is not with a program that misbehaves. It functions fine on a
daily basis. The problem only occurs when the software vendor pushes
automated updates to the program. The updates make changes to the folders
that house the program. The registry and such are not involved. On that
note...the LOCAL user accts would not need to be modified. I doubt we'd be
worried about updates to the program in an emergency situation, just usage.
So I am hoping a can change the domain policy for the client PC's to allow
domain regular users admin (or elevated privileged user) access to those
particular folders. I don't want to have to sit down to each machine to edit
the folder security settings.

Thanks in advance

"SuperGumby [SBS MVP]" wrote:

I have also been reminded that there is discussion of such in Advanced
Windows Small Business Server 2003 Best Practices
http://gallery.bcentral.com/GID4648245P3992382-Books/Book-Advanced-Windows-Small-Business-Server-2003-Best-Practices.aspx

"SuperGumby [SBS MVP]" <not@xxxxxxxxxxx> wrote in message
news:umbSbgn4GHA.668@xxxxxxxxxxxxxxxxxxxxxxx
Susan Bradley kindly pointed me to
http://blogs.msdn.com/aaron_margosis/archive/2006/08/07/LuaBuglight.aspx,
an application which helps identify why an app doesn't run in a restricted
context. I'm sure it and the surrounding conversations will be of
assistance.

Sorry, but I have no experience of the app. I still do it the hard way,
regmon/filemon/policy changes. I asked Susan because I thought some pages
I remembered assisting in this process were hers, but it must be a bad
memory.

"spectra" <spectra@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D76A5530-6514-47A2-AAA0-C782748FCE20@xxxxxxxxxxxxxxxx
We have 1 outsourced program that requires admin privileges to a few
folders
on the local hard drive to receive pushed updates. Right now the domain
users have admin rights to the local PC's to overcome the problem. I
would
like to remove the admin rights, leaving them as normal restricted users,
but
with admin rights to the folders. I would like to do this via SBS group
policy instead of at each machine. Can I specifiy the folder
locations/security via group policy at the SBS? Also, we have a LOCAL
user
acct set up on each machine, when not logged in to the domain, setup for
emergencies (the SBS server is down) for access to the same program. The
password is not released to the users unless there is an emergency. This
company can function without the server, just not without the program.
Can I
use group policy on the SBS to control the default NON-domain group
policy on
these machines. I thought I read that I can.
Also, has anyone had trouble with WSUS updates on the client machines
under
restricted user logins?
Group Policy changes make me nervous. :) If you can help, please be
specific as to where I would apply these policies.





.

Relevant Pages

  • Re: redirect users folders sbs2008
    ... use the group policy results wizard to ensure the group policy is being applied. ... The OU is SBS Computers, ... > can you let me know how to redirect the users folders from a windows7 ...
    (microsoft.public.windows.server.sbs)
  • Re: group policy local/domain users elevated privileges particular
    ... The updates make changes to the folders ... I would like to do this via SBS ... locations/security via group policy at the SBS? ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2008 Force client updates
    ... If you used the SBS wizards then that group policy would be created for you. ... In terms of updates for the clients, ... sbs management console to install updates automatically for the clients. ...
    (microsoft.public.windows.server.sbs)
  • Re: Update SBS2003 Premium with WSUS
    ... If you look at the GP which was created by WSUS for your workstations, you will get an idea of the kinds of settings you would have to configure. ... My question regads the SBS itself, maybe I wasn't clear about that aspect. ... Can you please guide me in getting the SBS to get updates from the WSUS ... > Clients are pointed to the WSUS Server updates via Group policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS2K3 and 2003 term server problem since SP1 upgrade
    ... sure that router is configured correctly, you can check if you can RDP to ... I will be here waiting for your updates. ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)