>Shouldn't they be able to install files using their AD account Of course, no offence intended but you seem to be missing some very basic principles..
Think of it this way, you want them to have 'power' over the local computer from an account in the domain so you add the DOMAIN account to the LOCAL "Power Users" group. Then while they are logged into the DOMAIN account from the LOCAL computer they have the rights you granted over the LOCAL machine from the DOMAIN account's membership in the LOCAL Power Users group. -----Original Message----- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 30, 2003 3:50 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Installing Files Shouldn't they be able to install files using their AD account rather than having 2 accounts? On Wednesday, July 30, 2003, at 01:52 PM, Free, Bob wrote: >> The user should only be able to install files on the workstation they >> are logged in to > > Put them in the Power users group **on the workstation they > are logged in to** > > > > -----Original Message----- > From: Richard Sumilang [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 30, 2003 10:52 AM > To: [EMAIL PROTECTED] > Subject: Re: [ActiveDir] Installing Files > > The user should only be able to install files on the workstation they > are logged in to, not a server. I am using Windows 2000 server with > Active Directory Users and Groups and don't see a group called "Power > Users". Just to clarify a little more, the user is like every other > general user on the network, they cant manage users, policies, etc, but > they can install programs on their own computer. > > On Tuesday, July 29, 2003, at 08:16 PM, Rick Kingslan wrote: > >> Richard, >> >> Install files....where? On a member server or workstation, it's going > >> to be >> Power Users unless it requires specific Administrational level >> privileges, >> then local admin is about your only choice. >> >> If it's not a member server, it must be a DC. In that case, Server >> Operator >> or Domain Admin is about the only choice - and I'd cut off an arm >> first. >> I'm with Roger and Joe on this one, and we've been pretty steadfast > and >> direct. Anyone that has more than just general permissions on a DC >> that is >> not a trusted administrator is like a fox in the hen house. It's not >> a good >> situation to be in because there is just too great a risk to take on. >> >> Rick Kingslan MCSE, MCSA, MCT >> Microsoft MVP - Active Directory >> Associate Expert >> Expert Zone - www.microsoft.com/windowsxp/expertzone >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Richard >> Sumilang >> Sent: Tuesday, July 29, 2003 6:51 PM >> To: [EMAIL PROTECTED] >> Subject: [ActiveDir] Installing Files >> >> What group does a user need to be in in order to install program on >> their >> computer in active directory? I don't want the user to be an >> administrator, >> it's just Ok if they install files. >> >> List info : http://www.activedir.org/mail_list.htm >> List FAQ : http://www.activedir.org/list_faq.htm >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> List info : http://www.activedir.org/mail_list.htm >> List FAQ : http://www.activedir.org/list_faq.htm >> List archive: >> http://www.mail-archive.com/activedir%40mail.activedir.org/ >> >> > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
