user rights and groups

[sharyn]

I am trying to set up a user on win2kpro to be able to share files and folders, but NOT install software. When I set the user in the restricted users group, I prevent them from installing software, but then they can't share folders and files. When I put them in the Power Users group, they can share files and folders, but can also install software. Does anyone know of a way to allow them to share files and folders, but NOT allow them to install software???

 

[dball63]

I haven't done this myself but you could make users "standard users and then create security policy with MMC snapin and give users or domain users the right to create permenant share objects. Try that and let us know if it works.

 

[sharyn]

Thanks for your response. I have tried what you suggested already. Either I don't understand exactly what the snap in that gives users the right to create permanent shares does, or it doesn't work the way I thought it would.

What I did was put my user in the regular users group and added them to that particular snap in. However, when I logged in as them, and attemped to create a share, the sharing option on the right click menu wasn't there.

Any other suggestions?????

THanks

 

[sharyn]

ok....

On a whim I decided to go ahead and try this again..today it seems to be working. Perhaps it was just late on a Friday afternoon the last time I tried this and I missed something that should've been obvious?

Anyway, thanks

 

[sharyn]

Dball.....

try doing this on your machine please..I have a brand new machine I'm setting up...and once again, this isnt working..I had to do it several times on my test machine to get it working. What I noticed was, on my machine, when I view the policy about creating permanent shares, there is some security ID that is not showing up on the new machine that I'm configuring. I have rebooted several times, relogged on as both administrator and the user I'm setting up..nothing seems to be working.

Now, with a brand new machine, its' not working again. There must be a step that im missing! HELP!

 

[mhughes]

Can't you allow your user this permission in local security?
Admin tool>local system secuity>local policy>user rights assignment

 

[sharyn]

I have tried this!

The local policy that says create a permanent share doesnt seem to work..or else I'm applying it incorrectly.

im at a loss as to what to do next