Hey,
I'm leaning towards putting all "domain users" in the local
"power user" group on every workstation. I think with
strong-restrictive group policies, you can get the balance of
functionally with giving the user more permissions on the local machine.
Is this true? Is what everyone doing this since a lot of applications
use the c:\winnt directory.
We are worried about more applications being installed on the
workstation.
The user rights on a default windows 2000 professional install is the
following rights on this directory:
C:\WINNT\
BUILTIN\Users Special Access [RX]
BUILTIN\Power Users Special Access [RWXD]
BUILTIN\Administrators Special Access [A]
NT AUTHORITY\SYSTEM Special Access [A]
CREATOR OWNER Special Access [A]
Eric Sabo
NT Administrator
Computing Services Center
California University of Pennsylvania
-----Original Message-----
From: Dickinson, Bill [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 10, 2001 9:38 AM
To: '[EMAIL PROTECTED]'
Subject: RE: [Windows2000] "power user" vs. "USER" local group on w2k
professional
On page 369 of MCSE Training Kit for Win2k Server: Power Users:
"Members can create and modify local user accounts on the computer and
share
resources."
Power Users also were able to install drivers. This was useful
for
non-NT print queues and such.
About 40% of our users are `Users` the rest are administrators.
The
only reason they are administrators are due to the fact they develop
software.
-----Original Message-----
From: Sabo, Eric [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, October 09, 2001 5:58 PM
To: [EMAIL PROTECTED]; MSWinNT Discussions; NT 2000
Discussions
Subject: [Windows2000] "power user" vs. "USER" local group on w2k
professional
Does anyone have any information about this topic? I am trying to
determine what is the difference between "power user" local group vs.
"user" local group on an Windows 2000 professional. Technet article
q217050 describes a little but I need more details then this article
has.
What is everyone on the list giving their end-users?
Thanks,
Eric Sabo
NT Administrator
Computing Services Center
California University of Pennsylvania
To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
To unsubscribe from this group, send an email to:
[EMAIL PROTECTED]
Your use of Yahoo! Groups is subject to
http://docs.yahoo.com/info/terms/
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
