User permissions

[shaunbutterfield]

Hi,

I'm fairly new to sbs 2003 but would greatly appreciate some advice. I have configured SBS 2003 with 10 or so users and computers successfully. My issue is, when ever a user logs on to a local computer (XP PRO), they received an error message indicating they did not have the required privledges to installt he applications (e.g. outlook etc). To get around this, I changed their permissions to administrators asked them to log on then changed them back. Is there another way of doing this as I need to add new applications to the computers shortly?

Also, probably associated with the above, if a user logs onto another computer the same occurs.

Some advice would be great!

Thanks,
Shaun

 

[markdmac]

This behavior is normal. Sounds like you did not use the

http://servername/ConnectComputer

wizard to join your users computers and assign a user to the PC.

By default SBS will make the user a local admin to install the software in their user context. After initial login you can then remove them from the admin group.

To get around this, or to make this an automated process, you can script the removal of the user from the local admin group.

Here is an example. Note that the paid for version also logs the action in the event logs.

'==========================================================================
'
' NAME: RemoveUserFromLocalAdminGroup.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL:

http://www.thespidersparlor.com

' DATE :
' COPYRIGHT (c) 2007 All Rights Reserved
'
' COMMENT: This script and many more are in the Admin Script Pack by
' The Spiders Parlor.

http://www.thespidersparlor.com/vbscript

'
' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
' ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
' THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
' PARTICULAR PURPOSE.
'
' IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS
' BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
' DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
' WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
' ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
' OF THIS CODE OR INFORMATION.
'
'==========================================================================
Dim WSHShell, WSHNetwork
Set WSHShell = CreateObject("Wscript.Shell")
Set WSHNetwork = CreateObject("Wscript.Network")
Domain = WSHNetwork.UserDomain
UserName = WSHNetwork.UserName
WSHShell.Run("CMD.EXE /C net localgroup administrators " & Domain & "\" & UserName & " /Delete")

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[shaunbutterfield]

Yes it does!

many thanks,
Shaun

 

[markdmac]

For whatever reason the paste of my code changed font. Reposting so you don't have problems. I will notify Tek-Tips managment if this messes up again.

'==========================================================================
'
' NAME: RemoveUserFromLocalAdminGroup.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.thespidersparlor.com[/URL]
' DATE  : 
' COPYRIGHT (c) 2007 All Rights Reserved
'
' COMMENT: This script and many more are in the Admin Script Pack by 
'          The Spiders Parlor.   [URL unfurl="true"]http://www.thespidersparlor.com/vbscript[/URL]
'
'    THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
'    ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
'    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
'    PARTICULAR PURPOSE.
'
'    IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS 
'    BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
'    DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
'    WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
'    ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
'    OF THIS CODE OR INFORMATION.
'
'==========================================================================
Dim WSHShell, WSHNetwork
Set WSHShell = CreateObject("Wscript.Shell")
Set WSHNetwork = CreateObject("Wscript.Network")
Domain = WSHNetwork.UserDomain
UserName = WSHNetwork.UserName
WSHShell.Run("CMD.EXE /C net localgroup administrators " & Domain & "\" & UserName & " /Delete")

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.

 

[PHV]

I will notify Tek-Tips managment if this messes up again
[ignore]I'd use

TGML tags instead of ... ;-) [/ignore]

 

[markdmac]

DOH! No wonder it looked ok the second time! Still odd that the quote changed the font, but thanks for keeping me honest PHV.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at

http://www.thespidersparlor.com/vbscript

Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.