Security Settings for Users to Defrag

[jwjhnsn]

I have gone to the GPEDIT.MSC and set the Security Settings....Local Policies ... Users Rights ... for my Power Users in my lab to Perform Volume Maintenance... so they can do Disk Cleanup and Defrag....

Problem is ... even after reboot... they can do the Disk Cleanup but still gives says my be admin to defrag.

what gives... this should work... any suggestions?

 

[bcastner]

See Kelly Theriot's comments, as it will not work for anyone other than the adminitrator or as a RunAs process with administrator credentials:

http://www.kellys-korner-xp.com/xp_defrag.htm

 

[Auger282]

telling users to defrag = admins avoiding problems

my 2 cents

 

[jwjhnsn]

defrag = admins ..??? explain what you mean please

 

[linney]

XP tends to agree with "jwjhnsn" if you believe what is stated in the Help program?

"Perform volume maintenance tasks.

Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment

Determines which users and groups have the authority to run volume maintenance tasks, such as Disk Cleanup and Disk Defragmenter.

Default: Administrators."


Kelly Theriot says,

"Disk Defragmenter was designed primarily for stand-alone workstations or servers whose users have the ability to log on locally with administrator privileges.

Disk Defragmenter is not intended to be a tool for administrators to maintain networked workstations."


I wonder if your situation is an unusual one that has managed to slip between the cracks?

 

[bcastner]

Copy/paste the below and save as defrag_all.vbs:

----------- start copy/paste below this line

Set WshShell = WScript.CreateObject("WScript.Shell")

Dim fso, d, dc
Set fso = CreateObject("Scripting.FileSystemObject")
Set dc = fso.Drives
For Each d in dc
If d.DriveType = 2 Then
Return = WshShell.Run("defrag " & d, 1, TRUE)
End If
Next

Set WshShell = Nothing

' from: Doug Knox [MS-MVP]
---------- end copy/paste above this line

Then use this file as the target for member Greg Palmer's RunAs wrapper application:

http://www.palmersoft.co.uk/main.asp?content=runasuser

The push the file out to your clients. You can even make it a target for scheduled tasks.

 

[jwjhnsn]

I am doing this on a workstation... in my classroom... so the students can do their own defrag...

The way I am set up now.. they have to log out.. I log in as Admin to defrag. Students are set up as Power
Users ... I added Power Users to the Perform Volume Maintenance in the Security Settings... save... shut down and rebooted... but the Power Users are still blocked.... message says you must be an Administrator to do ... even after setting the security for Power Users

 

[bcastner]

Power users do not have sufficient permissions to defrag.
Only Administrators. There is no local policy setting that can be changed to circumvent this.

The only way a non-administrator can defragment a local volume is to run the Dfrg.msc console in the context of a user who has administrator privileges.

 

[jwjhnsn]

that stinks... lol... do any of you know a good defrag utility that can be installed for the Power Users to use?

 

[bcastner]

I believe both Raxco Perfect Disk and Executive Software Diskeeper offer enterprise level products.