User Problems

  • Thread starter Thread starter Gavin
  • Start date Start date
G

Gavin

Sorry for the cross post guys but I didn't really know where to put this
one.

I am running a single server with a local active directory setup. All the
settings for the most part are defaults.

However, I have setup 2 new users. 1 is a admin and the other a domain
user.

When installing software on clients connected to the domian you have to be
the admin to do so. I expected this. However, it seems to be you have to
be the admin to run it too? Is this normal or am I over looking a setting
somewhere?

While I'm here!

Whats the difference between permmisions on a share and security?
How do you for a client to map a network drive to the server?

Many Many thanks for any help.

Gavin.
 
It is dependent on the software.
You can add the user into the local administrators group on their PC

Well one is the permissions on the share, the other is the permissions on
the file/folders.

Map a network drive.
You can do it

net use z: \\computername\sharename
or
Open explorer select tools menu and then Map Network Drive
or
via a .vbs file
Set objNetwork = CreateObject("WScript.Network")
objNetwork.MapNetworkDrive "z:", "\\server\share"




Regards
Mark Dormer
 
When installing software on clients connected to the domian you have to be
the admin to do so. I expected this. However, it seems to be you have to
be the admin to run it too? Is this normal or am I over looking a setting
somewhere?
Click to expand...

This isn't normal. This is down to poor, sloppy, programming. There are a
number of things you can do..

-- Run as (local) administrator - not a good idea
-- Set full control (or at least write permissions) to the program
files\application folder.
-- Set full control (or at least write permissions) to the programs registry
keys (sub-hive)
-- Apply the compatws.inf security template to lessen the overall security
(permissions) of the box. To do this, run the following from the command
prompt or run command:

secedit /configure /cfg %windir%\security\templates\compatws.inf /db
compat.sdb

Whats the difference between permmisions on a share and security?
Click to expand...

Share permissions apply to the share only. This means that they will only
come into effect if you connect via the network and the share. They have no
bearing on the local user, or a user that has connected to a different
share.

If you limit permissions on a share, and have less-restrictive NTFS
permissions on a sub-folder of the share, the tightest permissions win, and
access if denied. This is a pain. This is why, it is recommended that you
grant full control to authenticated users at the share level and configure
all permissions via NTFS (Security tab) permissions.

NTFS permissions apply locally and via the network and can be a lot more
granular. You can also audit access, etc. via NTFS permissions (well, the
(S)ACL anyway).

How do you for a client to map a network drive to the server?
Click to expand...

As already said, via the command prompt, it would be net use *
\\server\share

Via VBScript it's like so:

set objNetwork=createObject("WScript.Network")
objNetwork.mapNetworkDrive"v:","\\domain-name.com\sysvol"


And there's several ways of doing this through the GUI. The most common is
by right-clicking on My Computer and choosing Map network Drive.

Many Many thanks for any help.
Click to expand...

Always a pleasure, never a chore ;-)


--

Paul Williams

http://www.msresource.net/
http://forums.msresource.net/
 
Back
Top