-
April 19th, 2001, 12:44 PM
#1
Registered User
W2K PowerUser and Admin Rights
hey gang i'm in the middle of a nt -> w2k pro migration for our users(new machines with fresh install) and the problem and trend we seem to be having is the amount of apps that require the user to be a power user or admin on the local machine.
my techs will load the apps for the user roll out the machine, but the app won't run unless the user is a poweruser or admin on the local machine which is what we don't want to have to do.
some of the apps that are giving us this problem are crystal reports, oracle, power point org charts, and some custom app that we use.
is anyone else seeing this problem?
"no eternal reward will forgive us now for wasting the dawn"
-
April 19th, 2001, 01:41 PM
#2
We let 'em be power users of their own machines but they can't do much in the domain.
"what'dya mean I hosed the whole thing? Is that bad?"
-
April 19th, 2001, 02:21 PM
#3
Originally posted by LPetrarca:
We let 'em be power users of their own machines but they can't do much in the domain.
The same here. User status is so limited that you will be getting calls from everyone every five minutes. This gets old very fast. Setting as power user gives them authority over their domain(their computer) not the main domain.
Must not strangle users. Repeat. Must not strangle users.
-
April 19th, 2001, 03:54 PM
#4
Are the machines NTFS or FAT? IF they are NTFS you may be able to find the locations that need to be written to but if they are FAT then it is system commands that must change, and they need power user status on the local machine.
Death is lighter than a feather - duty heavier than a mountian.
The answer to your question is: 00110100 00110010
-
April 19th, 2001, 03:59 PM
#5
Registered User
Originally posted by cyberhh:
Are the machines NTFS or FAT? IF they are NTFS you may be able to find the locations that need to be written to but if they are FAT then it is system commands that must change, and they need power user status on the local machine.
they're all ntfs. i just hate to have to give the user access to any part of the machine that i know will start generating tech support calls because they started playing with stuff.
"no eternal reward will forgive us now for wasting the dawn"
-
April 20th, 2001, 05:15 AM
#6
Originally posted by storm:
they're all ntfs. i just hate to have to give the user access to any part of the machine that i know will start generating tech support calls because they started playing with stuff.
But that's why we have jobs!!!!! The entire reason for our existence!!!!!!!
"what'dya mean I hosed the whole thing? Is that bad?"
-
April 20th, 2001, 05:39 AM
#7
Registered User
Originally posted by LPetrarca:
But that's why we have jobs!!!!! The entire reason for our existence!!!!!!!
i enjoy your enthusiasm for the job but believe me we have enough around this joint to justify our existance.
"no eternal reward will forgive us now for wasting the dawn"
-
April 20th, 2001, 07:56 AM
#8
we're doing the same thing for a company out here in texas, what we had to do is find all the places these apps wanted control with and set permissions for them, things like subfolders of program files directory or certain registry keys. all of that takes alot of testing by our certification lab.
-
April 20th, 2001, 08:48 AM
#9
We were having the same problems as well, In the PU Group Properties we put
XXX-XX\Domain Users,
NT Authority\Authenticated Users,
NT Authority\INTERACTIVE.
These 3 groups solved the permissions problems and gave us back our time…
--------------------------------------------
What I need is a list of specific unknown problems we will encounter
-
April 20th, 2001, 09:32 AM
#10
As I said - check the difference between the rights of the two groups and change the required directory permissions accordingly.
check this http://support.microsoft.com/support.../q244/6/00.asp
for more information.
Death is lighter than a feather - duty heavier than a mountian.
The answer to your question is: 00110100 00110010
-
April 20th, 2001, 09:34 AM
#11
Also this article gives you the default NT 4.0 permissions - you can compare the two articles to see what changed: http://support.microsoft.com/support.../q148/4/37.asp
Death is lighter than a feather - duty heavier than a mountian.
The answer to your question is: 00110100 00110010
-
April 20th, 2001, 11:35 AM
#12
Registered User
great feedback, i appriciate all the posts, thanks.....
"no eternal reward will forgive us now for wasting the dawn"
-
April 22nd, 2001, 09:07 AM
#13
Depending on the app, isn't it possible to assign rights and priviliges to the software itself while withholding rights to the users?
I remember installing something recently on a 2k box that wanted a user account for its process.... Can't remember what the damn thing was called becaue it hasn't caused me any problems since....
What does this button do?
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|
Bookmarks