Allow XP domain users to install programs

[Guest]

I have a network with Win2K3 server with active directory and XP users. I
swear I have seen a security setting that will allow XP users to install
programs on their local PC. Right now the users are in the local
Administrator group but that is also giving them full access to shares and
restricted folders on the network.

 

[Bruce Chambers]

I have a network with Win2K3 server with active directory and XP users. I
swear I have seen a security setting that will allow XP users to install
programs on their local PC. Right now the users are in the local
Administrator group but that is also giving them full access to shares and
restricted folders on the network.

You need to add the users Domain accounts to their respective
computers' local Administrator group; from your description, you've
added them to the Domain Administrators group, thereby surrendering
control of the entire LAN to your users.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

 

[Guest]

Thank you Bruce. I will look into this.

You need to add the users Domain accounts to their respective
computers' local Administrator group; from your description, you've
added them to the Domain Administrators group, thereby surrendering
control of the entire LAN to your users.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin