User rights on Win2K domain

[Sleurhutje]

How do I give users morelocal rights when they logon to a Win2K or even
WinNT4.0 domain controller? By making the users primary group Domain Admins
and log on again, they can change settings like standby, screensaver and
start programs that use the Windows Registry very intensive.

But as a normal Domain User, they can't change nothing and Word Macro's
report problems on reg-keys unable to be updated.

How to change this (perhaps using gpedit.msc, but which keys)???


Jeroen

 

[Robert Moir]

How do I give users morelocal rights when they logon to a Win2K or
even WinNT4.0 domain controller? By making the users primary group
Domain Admins and log on again, they can change settings like
standby, screensaver and start programs that use the Windows Registry
very intensive.

But as a normal Domain User, they can't change nothing and Word
Macro's report problems on reg-keys unable to be updated.

How to change this (perhaps using gpedit.msc, but which keys)???

Er... when you say log onto a domain controller, do you mean logging into a
domain via a workstation (in which case have you tried making the domain
users group a part of the local computer's power users group to see if that
helps you?) or do you mean you allow users to log in at the domain
controller's physical keyboard and monitor? (which is generally regarded as
a bad idea).


--

 

[Steven L Umbach]

You might try adding their domain user account to the local power users group on
their machines or try implementing the compatws.inf template which does much of the
same without the extra powers that power users have such as creating shares. NEVER
add regular users to the domain admins group - they could change your password,
tc. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;269259
http://www.microsoft.com/technet/tr...hnol/winxppro/proddocs/sag_SCEdefaultpols.asp
http://tinyurl.com/pxg6 --- Same link as above, but shorter.