Local Permission Setup

[sysadmin123]

Alright I'm going it circles trying to figure out the best way to set up permissions on my network as far as each local system goes.

They way I have it set up now is that each computer I add the NT Authority Authenticated Users group into the Power Users Group. That way each user that logs in has Power User privledges.

We had an IT firm do an audit and this is what they suggested. Actually they wanted it even less but some 3rd party programs needed at least the powers user level to function.

Well I'm trying to use Robocopy to automate the backup process and autobackup favorites etc to a shared drive. Well some users are working and some aren't.

The difference I found was that those users I had added their user account only as an Admin on the system so that's why it's working. Those that aren't are having the issues.

So my questions is how does everyone have permissions set up on their networks. Is it ok to add only the user account as admin or should I stick with the authenticated users in the power users group. This is turning out to be a nightmare.

THX

 

[DPlank]

I'd recommend using something like RunAs to allow the programs that require it to run with elevated privileges rather than giving all the users membership of the Admin group.

Cheers,
Dave

Probably the only Test Analyst on Tek-Tips...therefore whatever it was that went wrong, I'm to blame...

animadverto vos in Abyssus!

Take a look at Forum1393 & sign up if you'd like

 

[bcastner]

You need to add the Group "Backup Operators" to the Group membership for your users. Start, Run, lusrmgr.msc

Groups
Backup Operators, Add
And then include either Everyone or Authenticated Users.

 

[sysadmin123]

So backup operators has more privledges than power users?

 

[bcastner]

The Backup Operators Group can transcend security for backup operations, but cannot change any existing files, registry entries or service entries or anything else. It is an absolute READ privilige.