>The user should only be able to install files on the workstation they >are logged in to
Put them in the Power users group **on the workstation they are logged in to** -----Original Message----- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2003 10:52 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Installing Files The user should only be able to install files on the workstation they are logged in to, not a server. I am using Windows 2000 server with Active Directory Users and Groups and don't see a group called "Power Users". Just to clarify a little more, the user is like every other general user on the network, they cant manage users, policies, etc, but they can install programs on their own computer. On Tuesday, July 29, 2003, at 08:16 PM, Rick Kingslan wrote: > Richard, > > Install files....where? On a member server or workstation, it's going > to be > Power Users unless it requires specific Administrational level > privileges, > then local admin is about your only choice. > > If it's not a member server, it must be a DC. In that case, Server > Operator > or Domain Admin is about the only choice - and I'd cut off an arm > first. > I'm with Roger and Joe on this one, and we've been pretty steadfast and > direct. Anyone that has more than just general permissions on a DC > that is > not a trusted administrator is like a fox in the hen house. It's not > a good > situation to be in because there is just too great a risk to take on. > > Rick Kingslan MCSE, MCSA, MCT > Microsoft MVP - Active Directory > Associate Expert > Expert Zone - www.microsoft.com/windowsxp/expertzone > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Richard > Sumilang > Sent: Tuesday, July 29, 2003 6:51 PM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] Installing Files > > What group does a user need to be in in order to install program on > their > computer in active directory? I don't want the user to be an > administrator, > it's just Ok if they install files. > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
