Workstation permissions on the domain

  • Thread starter Thread starter Michael Mishler
  • Start date Start date
M

Michael Mishler

I'm trying to figure out how to make the server automatically allow write
permissions to the workstations without giving each account domain admin
status.

For example, I have myself as a domain admin, so when I log onto any
workstation on the network, I can do anything because domain admins are part
of the Administrators of the local machine.

The problem I'm having is finding a happy-medium in between domain admin and
domain user. A domain user cannot change their background picture on the
desktop, cannot install software etc. But a domain admin can do too much
for a typical end-user.

Of course, I can manually add that persons name to the local user accounts
for that machine, but I don't want to have to do that because of time
restraints.

Does anyone have a solution to this problem?

Thanks
Michael Mishler
 
I'm trying to figure out how to make the server automatically allow write
permissions to the workstations without giving each account domain admin
status.

For example, I have myself as a domain admin, so when I log onto any
workstation on the network, I can do anything because domain admins are part
of the Administrators of the local machine.

The problem I'm having is finding a happy-medium in between domain admin and
domain user. A domain user cannot change their background picture on the
desktop, cannot install software etc. But a domain admin can do too much
for a typical end-user.

Of course, I can manually add that persons name to the local user accounts
for that machine, but I don't want to have to do that because of time
restraints.

Does anyone have a solution to this problem?

Thanks
Michael Mishler
Click to expand...
Make "Domain Users" and member of the local "Power Users" group.
You can use tip 5237 in the 'Tips & Tricks' at http://www.jsiinc.com to do it.


Jerold Schulman
Windows: General MVP
JSI, Inc.
http://www.jsiinc.com
 
Back
Top