Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

User permissions

Status
Not open for further replies.

shaunbutterfield

IS-IT--Management
May 18, 2007
2
GB
Hi,

I'm fairly new to sbs 2003 but would greatly appreciate some advice. I have configured SBS 2003 with 10 or so users and computers successfully. My issue is, when ever a user logs on to a local computer (XP PRO), they received an error message indicating they did not have the required privledges to installt he applications (e.g. outlook etc). To get around this, I changed their permissions to administrators asked them to log on then changed them back. Is there another way of doing this as I need to add new applications to the computers shortly?

Also, probably associated with the above, if a user logs onto another computer the same occurs.

Some advice would be great!

Thanks,
Shaun
 
This behavior is normal. Sounds like you did not use the wizard to join your users computers and assign a user to the PC.

By default SBS will make the user a local admin to install the software in their user context. After initial login you can then remove them from the admin group.

To get around this, or to make this an automated process, you can script the removal of the user from the local admin group.

Here is an example. Note that the paid for version also logs the action in the event logs.
'==========================================================================
'
' NAME: RemoveUserFromLocalAdminGroup.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: ' DATE :
' COPYRIGHT (c) 2007 All Rights Reserved
'
' COMMENT: This script and many more are in the Admin Script Pack by
' The Spiders Parlor. '
' THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
' ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
' THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
' PARTICULAR PURPOSE.
'
' IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS
' BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
' DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
' WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
' ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
' OF THIS CODE OR INFORMATION.
'
'==========================================================================
Dim WSHShell, WSHNetwork
Set WSHShell = CreateObject("Wscript.Shell")
Set WSHNetwork = CreateObject("Wscript.Network")
Domain = WSHNetwork.UserDomain
UserName = WSHNetwork.UserName
WSHShell.Run("CMD.EXE /C net localgroup administrators " & Domain & "\" & UserName & " /Delete")

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
For whatever reason the paste of my code changed font. Reposting so you don't have problems. I will notify Tek-Tips managment if this messes up again.

Code:
'==========================================================================
'
' NAME: RemoveUserFromLocalAdminGroup.vbs
'
' AUTHOR: Mark D. MacLachlan , The Spider's Parlor
' URL: [URL unfurl="true"]http://www.thespidersparlor.com[/URL]
' DATE  : 
' COPYRIGHT (c) 2007 All Rights Reserved
'
' COMMENT: This script and many more are in the Admin Script Pack by 
'          The Spiders Parlor.   [URL unfurl="true"]http://www.thespidersparlor.com/vbscript[/URL]
'
'    THIS CODE AND INFORMATION IS PROVIDED "AS IS" WITHOUT WARRANTY OF
'    ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED To
'    THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A
'    PARTICULAR PURPOSE.
'
'    IN NO EVENT SHALL THE SPIDER'S PARLOR AND/OR ITS RESPECTIVE SUPPLIERS 
'    BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR ANY
'    DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
'    WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
'    ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
'    OF THIS CODE OR INFORMATION.
'
'==========================================================================
Dim WSHShell, WSHNetwork
Set WSHShell = CreateObject("Wscript.Shell")
Set WSHNetwork = CreateObject("Wscript.Network")
Domain = WSHNetwork.UserDomain
UserName = WSHNetwork.UserName
WSHShell.Run("CMD.EXE /C net localgroup administrators " & Domain & "\" & UserName & " /Delete")

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
I will notify Tek-Tips managment if this messes up again
[ignore]I'd use
Code:
TGML tags instead of ... ;-) [/ignore]
 
DOH! No wonder it looked ok the second time! Still odd that the quote changed the font, but thanks for keeping me honest PHV.

I hope you find this post helpful.

Regards,

Mark

Check out my scripting solutions at
Work SMARTER not HARDER. The Spider's Parlor's Admin Script Pack is a collection of Administrative scripts designed to make IT Administration easier! Save time, get more work done, get the Admin Script Pack.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top