Modify pc for new user

[Scott]

I need to modify an ex-staff pc for a new user. I have added a new user
account to the pc and remove the profile of old user and computer name and
login account, etc. The pc has two accounts: one is local administrator
account and a domain user account (power user to avoid free installation of
software). I note that the new user has read-only right on the files/folder
of old staff. The new staff can create new file and has full right to edit
and delete his files/folders. Can someone advise me the possible causes and
fixes.

Thanks,

Scott

 

[Shenan Stanley]

I need to modify an ex-staff pc for a new user. I have added a new
user account to the pc and remove the profile of old user and
computer name and login account, etc. The pc has two accounts: one
is local administrator account and a domain user account (power
user to avoid free installation of software). I note that the new
user has read-only right on the files/folder of old staff. The new
staff can create new file and has full right to edit and delete his
files/folders. Can someone advise me the possible causes and fixes.

The new user should have no rights to the old users stuff and you should
have not created a local account - but a domain account - for the new user.

In other words - if the machine is in a domain, all you do is add a domain
account for the new user and let them logon to the domain system(s) of their
choice.

 

[Guest]

Hi Scott,

Its quite obvious.. Login as admin andchange the ownership of the old user
files to new user .. Thiswill solve the problem.. It is obvious under NTFS

 

[Scott]

Shenan,

The new user should have no rights to the old users stuff and you should
have not created a local account - but a domain account - for the new
user.

Yes, you are quite right. I want to create a domain account only and change
the computer name to the new user.

In other words - if the machine is in a domain, all you do is add a domain
account for the new user and let them logon to the domain system(s) of
their choice.

If the domain account has administrator right, he/she can access the files
of ex-staff but I do not want to give administrator right to all users but
power user right. Where should I change it?

 

[Shenan Stanley]

I need to modify an ex-staff pc for a new user. I have added a
new user account to the pc and remove the profile of old user and
computer name and login account, etc. The pc has two accounts:
one is local administrator account and a domain user account
(power user to avoid free installation of software). I note that
the new user has read-only right on the files/folder of old
staff. The new staff can create new file and has full right to
edit and delete his files/folders. Can someone advise me the
possible causes and fixes.

The new user should have no rights to the old users stuff and you
should have not created a local account - but a domain account -
for the new user.

In other words - if the machine is in a domain, all you do is add
a domain account for the new user and let them logon to the domain
system(s) of their choice.

Yes, you are quite right. I want to create a domain account only
and change the computer name to the new user.
If the domain account has administrator right, he/she can access
the files of ex-staff but I do not want to give administrator right
to all users but power user right. Where should I change it?

First off - if you want the new user to have access to the old user's
files - then you should probably copy the old user's files/folders/emails
"selectively" to another location (maybe their network home drive? A shared
network resource? Worst case - the new user's My Documents *after* they
have logged on the new computer the first time) - and not try to do anything
more than "user-level" access on any machine. You do *not* want
administrators and you do *not* want Power Users as those you manage.
You'll end up spending a lot more time than necessary cleaning up mistakes
the users do not even know how they made.

Secondly - you want to log on the machine (or manage it using Active
Directory Users & Computers) and "Manage" it (Computer Management( and make
sure (it should be by default) that 'Domain Users' <- a group -> is a member
of the local "Users" group. If you *insist* on giving yourself more to do
later and want the users of the domain to be power users on the local
system - you can add the users tot he local "Power Users" group there as
well.

 

[Scott]

Ahmad,

Thanks for your useful advice. Would the ownership also affect the use of
the programs installed during the ex-staff service period? Is there any
mechanism to transfer the ownership of ex-staff to the whole computer as I
will delete the profile of the ex-staff eventually?

Thanks,

Scott

 

[Shenan Stanley]

I need to modify an ex-staff pc for a new user. I have added a
new user account to the pc and remove the profile of old user and
computer name and login account, etc. The pc has two accounts: one is
local administrator account and a domain user account (power user to avoid
free installation of software). I note that the new user has read-only
right on the
files/folder of old staff. The new staff can create new file and has
full right to edit and delete his files/folders. Can someone advise
me the possible causes and fixes.

ahmadifx wrote

Its quite obvious.. Login as admin andchange the ownership of the
old user files to new user .. Thiswill solve the problem.. It is
obvious under NTFS

Thanks for your useful advice. Would the ownership also affect the
use of the programs installed during the ex-staff service period? Is there
any mechanism to transfer the ownership of ex-staff to the
whole computer as I will delete the profile of the ex-staff
eventually?

Taking Ownership of the old user profile directory and changing permissions
would work - but would not be the method I would use entirely. I would move
the old (unused I am assuming from this thread) user profile directory
outside of the normal location at the very least if I was usiung that
method.

If the whole goal was to give the new user the same
files/folders/favorites/desktop as the old user - the best method would have
been to use the Files and Settings Transfer Wizard on the old account before
disabling/deleting the account. Then you could have imported said account
into the new users account and they would have everything the old user had -
down to and including settings in applications like Word/Excel. The old
account would no longer exist/need to and you could have all your domain
users and pure users - Power users does NOT prevent all installations.

 

[Scott]

Shenan,

I am exciting on your answers below:-

ahmadifx wrote


Taking Ownership of the old user profile directory and changing
permissions would work - but would not be the method I would use entirely.
I would move the old (unused I am assuming from this thread) user profile
directory outside of the normal location at the very least if I was usiung
that method.

It is not practical to find out all the files of old user although I create
a drive D for data storage for each user. They still stored the files
anywhere they like. Files on D are sure but not complete.

If the whole goal was to give the new user the same
files/folders/favorites/desktop as the old user - the best method would
have been to use the Files and Settings Transfer Wizard on the old account
before disabling/deleting the account. Then you could have imported said
account into the new users account and they would have everything the old
user had - down to and including settings in applications like Word/Excel.
The old account would no longer exist/need to and you could have all your
domain users and pure users - Power users does NOT prevent all
installations.

Files and Settings are new to me. I have read Q293118 and it seems to be
suitable for this task and will make a traial next week. To my
understanding, it exports the files and settings to a place logging in the
old account and then logging in the new account to import them to the new
account.

It still has some concern about the files in drive C. The username might
store the files in the relevant software due to default path by the
software - quite common.