Win2k AD SBS 2000
I want to give users more rights then just the domain user group, but i dont want to give them admin rights.
like rights to
- ipconfig /release, and /renew
- change settings in IE
- install programs
where to i change these settings?
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Hi biggy,
Adding,removing program is definitely a Admin right -by design-
So i don't think you'll find what you're asking...
Workaround is available for example if you use SMS, then create a package for each of your need,
i.e. : a package called "Ip renewall' will make an ipconfig /release_all then ipconfig /renew_all with the local admin rights.
Seb
You can make domain group which are members of local groups, the process for making a domain group members of local administrators is explained in the following microsoft KB article, but it can also be used on other local groups
http://support.microsoft.c
But that might not be enough you can also assigned certain privlages via group policy or local system policies, they can be found in Computer Configuration\Windows Settings\User Rights Assignment and also some of Computer Configuration\Windows Settings\Security Options may also be of use.
We had a similar situation but simply to solve hassle gave the group local admin rights then using group policy retricted their access to thing we didn't want them to have access to, such as regedit or some aspects of the control panel.
Do you already have a SMS system running ?
If so, then you can use the small tool called "SMS Installer" to create your own executable that will run the following scripted sequence:
ipconfig /release_all
ipconfig /renew_all
Then you will just have to advertise this program using the SMS wizard to the collection of your choice, and the tip is to confirm that this program will run with admin rights.
See the following Microsoft article : http://www.microsoft.com/t
Business Accounts
Answer for Membership
by: biggy_bPosted on 2003-09-02 at 12:50:48ID: 9269658
blah sorry i ment i want to give them these,
- ipconfig /release, and /renew
- change settings in IE
- install programs
rights, just not admin rights