Re: Domain User Privileges on Client Computer

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Thank you for the reply Meinolf Weber.

I checked the Active Directory services. The Domain Users is linked to a
Domain Group. I looked at the Group Policy Management, the Domain Group has
permissions: Link GPOs. Under the Groups and Users with permission on the
Domain Group is Enterprise Admins: Inherited = yes; Status = Applies to this
container and all child containers.

Domain Users -> Domain Group -> GPM -> Permission -> Link GPOs -> Groups and
Users w/ Permission for Domain Group -> enterprise Admins -> Inherited: YES
-> Setting -> Applies to this container and all child containers

Not sure if what I just said is clear to you or fuzzy since I am a
novice-backup on this.

Is the structure causing the domain users to have administrator privileges
on client computers?

Thanks again.



"Meinolf Weber" wrote:

Hello Genesis,

If they are not added to the local administrators group with a specified
group or the account itself, basically it can not be. Even if you use a GPO
with restricted groups they should be listed in the local admins group. Did
you check Active directory builtin groups like enterprise admins etc.? Are
the domain user accounts you are taking about addded there?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hello Everyone!
I don't know if I am posting in a correct category, so please tell me.
here is the problem: All domain user accounts suddenly have
administrator privileges on the client computers. I checked the client
computers if the domain users are set up as administrators but they
are not. Checked the domain users setting found everything is ok. If I
connect a new client computer to the domain and a domain user
logged-in the privilege is not that of the administrator.

Am I missing something here? Any idea?

Thank you.




.

Relevant Pages

  • Re: Windows cannot update your roaming profile: why not?
    ... see the permissions on as administrator. ... directory for my username, and the "Date Modified" has continued to be ... Group: Domain Users ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Users cant execute applications on SBServer
    ... Addind Domain Users to the Administrators on the Terminal Server ... I copied the application executable to the Terminal Server ... but that they can execute the application if initiated from ... the domain user logon workstation have administrator permission ...
    (microsoft.public.windows.server.sbs)
  • Re: Window 2000: User als local PC admin
    ... > domain users als local PC administrator. ... create a Group Policy based computer startup script ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.security)
  • Installing New Work Stations
    ... The machines have fresh installations of XP SP2. ... I will use this occasion to try to understand a perpetual problem that I have: Giving administrator rights to the local machine after the work station joins the domain of the Windows 2003 Server. ... Do I add "Domain Users" or "Authenticated Users" to the local machine Administrators group? ...
    (microsoft.public.windows.server.general)
  • Re: Unable to logon thru Terminal Services
    ... Nat shouldn't matter, becasue you can logon with the administrator account, ... which mean you client side network setting is correct. ... > Domain Users ...
    (microsoft.public.windows.server.sbs)