Domain and Local user rights

[Hitesh0528]

I was wondering ... i need to find a way so that the users have power user rights on the machine but restrcted user rights on the network is this possible and if so how do i do it exactly

 

[CSUKNic]

ok, I am assuming that you have setup some group policies for your users. So in order to solve your problem, log onto the local machine using local admin rights, and under the users option in admin tools/computer. Add all the listed network users from the server, using the full server path ie: //server1/user1, then give all those names power user rights locally. This way, no matter who logs on from the network, they will get local rights to the installed software on the desktop, without compromising their access rights to the server.

 

[Hitesh0528]

CSUKNic thank you

but where is the admin tools/computer do i do all that on anymachine or the machine that has active directory on it

 

[CSUKNic]

You have to do this on each LOCAL pc, not the server with active directory. if you cannot see administrative tools on the local machine it may be that it's disabled in start menu, goto control panel, administrative tools, computer management, then add all the networked users (you'll have to browse for them) into the power users group.

 

[Hitesh0528]

i cant see the power users group or any of the other users on the network....this idea your telling me will this allow all user on the Machine to have power user right and restricted user rights on the network

 

[Hitesh0528]

okay i added all the users to the power users groups...now does this mean that any user that logs on to the machine will have power user rigths...and also how do i have it so that when they are on the network they have restricted user right but still power user rigths on the machine

 

[jtb]

Exactly what type of network restrictions are you intending? No printing? No reading certain folders? No internet?

JTB
Have Certs, Will Travel
"A knight without armour in a [cyber] land."

 

[Hitesh0528]

i want them to beable to access files well certain files but just to beable to update windows..check e-mail and just do norman networking thing like not beable to change anything on the network so they can screw it up in anyway

 

[jtb]

set up users as power users grants them power on the local system. network permissions are set up when you set up the shares...

JTB
Have Certs, Will Travel
"A knight without armour in a [cyber] land."

 

[Hitesh0528]

even when i add all the power users to the group like u told me too and i tried restricting the user rights on the network i still can update windows