Workstation permissions on the domain

[Michael Mishler]

I'm trying to figure out how to make the server automatically allow write
permissions to the workstations without giving each account domain admin
status.

For example, I have myself as a domain admin, so when I log onto any
workstation on the network, I can do anything because domain admins are part
of the Administrators of the local machine.

The problem I'm having is finding a happy-medium in between domain admin and
domain user. A domain user cannot change their background picture on the
desktop, cannot install software etc. But a domain admin can do too much
for a typical end-user.

Of course, I can manually add that persons name to the local user accounts
for that machine, but I don't want to have to do that because of time
restraints.

Does anyone have a solution to this problem?

Thanks
Michael Mishler

 

[Jerold Schulman]

I'm trying to figure out how to make the server automatically allow write
permissions to the workstations without giving each account domain admin
status.

For example, I have myself as a domain admin, so when I log onto any
workstation on the network, I can do anything because domain admins are part
of the Administrators of the local machine.

The problem I'm having is finding a happy-medium in between domain admin and
domain user. A domain user cannot change their background picture on the
desktop, cannot install software etc. But a domain admin can do too much
for a typical end-user.

Of course, I can manually add that persons name to the local user accounts
for that machine, but I don't want to have to do that because of time
restraints.

Does anyone have a solution to this problem?

Thanks
Michael Mishler

Make "Domain Users" and member of the local "Power Users" group.
You can use tip 5237 in the 'Tips & Tricks' at http://www.jsiinc.com to do it.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com