One profile for all users?

[J741]

I have Windows XP Pro networked to a Windows 2000 domain controller on a small office network of about 20 machines. Ideally, I would like the users to be able to have administrative rights on the local machine, but not the network servers. I would also like each user login to have the same desktop, start menu, settings, etc.

The primary reason for this desire is so that users can install programs and activate pcAnywhere hosts (which they can't seem to do unless they have administrator privelidges). Also, when one user (such as "Administrator&quot sets up the desktop icons, start menu settings, and installs programs, all of those changes are reflected when another user (such as "receptionist" or "Doctor&quot logs in. Also, I'd like these settings reflected on the user's account even when he or she does not log in to the domain, but logs in to the local machine.

Is this possible? Is this reasonable to implement?

 

[445577]

Hey you can try to open the sequrity tab in The user consol and ther you can give a user acept or denye

 

[Jwvanas]

We have 30 workstations running and 8 servers, all users got administrator rights on the workstations, and no rights on any server. It works like a charm, you only need to add domain users to the administrator group on the workststation you want them to have access to.

 

[wolluf]

You can give all domain users the same desktop by making them all use the same mandatory (changes not saved when you logoff) roaming profile. However, if they log on locally, the domain settings will not be reflected (even if local username same as domain, windows uses different profiles for the 2 users). You could set up the 'Default User' profile on each machine as you want it - then delete all local profiles - users will get this 'default' on next logon (but it will not be an unchanging mandatory profile - that is I don't think you can set up the Default User profile as mandatory, but I've never tried it).