Windows XP Pro in a network

[walter]

Im having some issues with with some apps on XP Pro systems attaching to a
W2K domain.....
I need a fairly basic question answered....

Say youve got a xp pro system that is attaching to a w2k domain. The user
that is logging on is a domain user and not a local pc user. When that
person logs onto the domain at that computer, what rights to the local
computer does he (by default) have?

I'm asking this question because Word perfect will not work on the local PC
unless the logged on user is a member of the domain admin grp, OR an
administrator of the local machine........
This cannot be correct, can it?.. that a user must be an admin on the local
PC to run standard apps? This would make it very difficult to deploy Wp onto
a network.. since you would have to go around to each PC after and make the
user a local admin........

thoughts...
ideas...
solutions.... ????

 

[Shenan Stanley]

Im having some issues with with some apps on XP Pro systems attaching
to a W2K domain.....
I need a fairly basic question answered....

Say youve got a xp pro system that is attaching to a w2k domain. The
user that is logging on is a domain user and not a local pc user.
When that person logs onto the domain at that computer, what rights
to the local computer does he (by default) have?

I'm asking this question because Word perfect will not work on the
local PC unless the logged on user is a member of the domain admin
grp, OR an administrator of the local machine........
This cannot be correct, can it?.. that a user must be an admin on the
local PC to run standard apps? This would make it very difficult to
deploy Wp onto a network.. since you would have to go around to each
PC after and make the user a local admin........

thoughts...
ideas...
solutions.... ????

First, your question about rights on the local computer.. That all depends
on the Domain Policies and scripts. If, by chance, you have an admin that
is pretty swift and has made it so that certain groups are added to the
local PC when it joins the domains or reboots or whatever, then the
permissions would be determined by these groups. However, if they have not
done this, then the Domain User would likely be a lowly "USER" in the scheme
of things and VERY VERY limited.

WordPerfect is a very picky application. You say they have to be a member
of the Domain Admins group or the Local Admins group. Guess what - to the
local machine, there is no difference. If you are a member of the domain
and have not madified Group Membership on it in any way - the Domain Admins
group was added to the local "Administrators" group.

Have you tried "Power Users"?

Also, you could add all the Authenticated Users in the domain to the Power
Users group should that work.

A command line way to do this would be (on the PC):

net localgroup "Power Users" "DOMAIN\Authenticated Users" /ADD

 

[walter]

Yes, I know that domain admins are by default admins on the local pc,...
part of my point is that if the user must be an admin on the pc in order
to use WP.. there must be an easier way to do this than to make a trip to
each pc to add them..
i have not been able to find a way to add domain users to local admin grp.
This command line you mention.. would this work from within the logon
script?.. If so, then that could be an answer......
thanks for the info