User Rights

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

In our office, Windows 2000 is domin controller and the clients are windows
XP. In C drive windows XP is installed and in D drive users are allowed to
save their data which has modify access to the users. I found a user who has
installed applications to his windows xp machine in D drive. I need to
restrict them installing application by their own and i also need to allow
them to save their data to D drive. These users are in domain user group.

Thanks in Advance
Regards
Venki
 
I found a user who has
installed applications to his windows xp machine in D drive. I need to
restrict them installing application by their own and i also need to allow
them to save their data to D drive. These users are in domain user group.
Click to expand...

If their domain account is a member of the local administrator group remove
it.


hth
DDS W 2k MVP MCSE
 
Are they members of the domain admin group?

They need to be *some* kind of administrator to install programs.

DDS
 
Not necessarily. For instance none of my programs require admin to install, you
only need write access to some part of the file system. You need admin rights if
you are writing to some portion of the system that only allows admins to write
such as parts of the registry or file system.

This isn't something that can be completely blocked for this very reason. You
can not set up ACLs in NTFS to block types of files. It is all just data.

joe
 
Thanks Joe, Now i understood.

Joe Richards said:
Not necessarily. For instance none of my programs require admin to install, you
only need write access to some part of the file system. You need admin rights if
you are writing to some portion of the system that only allows admins to write
such as parts of the registry or file system.

This isn't something that can be completely blocked for this very reason. You
can not set up ACLs in NTFS to block types of files. It is all just data.

joe
Click to expand...
 
Back
Top