We have an application or two that we run where the manufacturers recommends
that any user be logged in as an administrator on the local PC. Being the
good little lambs that we are we have always followed this rule.
Anyway now that we are set up with a Terminal Server I am seeing, more than
ever, why the need for each user to have local admin rights is such a
concern. It looks to me like every user of the TS needs to be added to the
local Remote Desktop Users group on the TS. In addition it seems I will need
to make these users members of the Administrators group which unfortunately
provides Admin rights to the Domain as well as the local PC.
We don't use Group Policy yet. I'm interested in knowing what I"m supposed
to do now. I certainly don't want these folks to have carte blanche on the
network.
Re: Programs that need admin rights, but user shouldnt have them ... Some GPO settings stick and some don't. ... >> Administrator on the computer (e.g. some of the Windows XP Firewall ... >> indicates whether a local administrator can override the setting or not. ... >>>the user to have local machine and domain local admin rights.... (microsoft.public.win2000.group_policy)
Re: Program needs Administrator access ... application folder itself in the program files folder....administrator because I have 1000 users. ... to make every authenticated user logon with local administrator... even if you are giving everyone the admin rights.... (microsoft.public.windowsxp.security_admin)
Re: IIS and Frontpage security ... The user must have FP Admin rights to the web, this is not that same as have Admin rights to the ...server via the OS. ...FrontPage Resources, WebCircle, MS KB Quick Links, etc. ... When I log in as an administrator I can edit the webpage ... (microsoft.public.frontpage.extensions.windowsnt)
Re: Administrative rights on local Windows XP box ... The problem is when you log into the domain with admin rights using the laptop and need to load print drivers or service packs the laptop says you dont have administrator rights.... They that can give up essential liberty to obtain a little temporary safety deserve neither liberty nor safety. ... (microsoft.public.windowsxp.help_and_support)
Re: IIS and Frontpage security ... The user has Admin rights via FP. ... When I log in as an administrator I can edit the webpage ... When my webmaster attempts to get in, ... >> The user should not need elevated NTFS permissions,... (microsoft.public.frontpage.extensions.windowsnt)
