Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Windows 2000 Group Permission

Posted on 2003-03-14
6
Medium Priority
?
132 Views
Last Modified: 2013-12-04
As a Power User within a Windows 2000 group, a Power User is not able to run a scan disk, disk defrag or Windows Updates.  I know there is a way to make that group able to do those 3 things but I am lost trying to find it.  Going in the Local Policies, I can not seem to find where to asign it.  Any help out there?
0
Comment
Question by:TBReil
  • 2
4 Comments
 

Expert Comment

by:jhsemrontmex
ID: 8140844
Find the folder that Scandisk etc is in. ie: C:\Document and Settings\what_ever_the_user_is\folder (use explorer)
Right click and set the permissions for this : Admin to Full control, and Power Users to Read and Execute. (not modify or full, unless u want 2 but why). Thats all in the Security options tab of the FOLDERS properties. If you then want to set specifics click the advanced button (inside the security tab) and click view/edit on the Power Users group and you'll find more NTFS permissions then you ever wanted to know about. That shoul do it.
-John S.
0
 

Expert Comment

by:jhsemrontmex
ID: 8145273
So did this help?
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 80 total points
ID: 8150795
You can't use these 2 tools without being member of local admin group, because the tools needs admin acces on the whole hard disc.


HJSEMRONTMEX ... defrag is in C:\WINNT\System32\dfrg.msc


TBREIL... You are doing the right thing with security, BUT PLEASE READ THIS CAREFULLY:

You must NEVER NEVER add a Domain User Group to the Local Admin Group on each workstation.

And You must NEVER add the same Domain User to the Local Admin Group on more than his/hers own workstation

If You add a Domain Group membership to the Local Admin Group, everyone being member gets unlimited REMOTE access power of all simular workstations on Your network.

The unlimited REMOTE access involves:
1. Explorer: \\ComputerName\C$
2. Registry
3. Computer Management (Control Panel)


IF YOU WANT TO KNOW MORE ABOUT THIS ISSUE:

http://www.experts-exchange.com/Security/Win_Security/Q_20506528.html
http://www.tryware.dk/English/W2kLocalGroupPolicy/TotalAdminPower.html
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/evaluate/featfunc/07w2kadc.asp
http://support.microsoft.com/?kbid=182734


IF YOU WANT TO TEST IT:
You have to add the Domain User Group to the Local Admin Group on BOTH test-workstations, and logout and logon again.

Important: You have to make a new logon after creating the credentials, because they are given in W2k in the second where You press ENTER to password when logging on.

Please reply, when You have removed the Domain User Group from the Local Admin Group again!


Many Regards

Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open.





0
 

Expert Comment

by:CleanupPing
ID: 9070706
TBReil:
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
EXPERTS:
Post your closing recommendations!  No comment means you don't care.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
The Relationships Diagram is a good way to get an overall view of what a database is keeping track of. It is also where relationships are defined. A relationship specifies how two tables connect to each other. As you build tables in Microsoft Ac…
Suggested Courses
Course of the Month11 days, left to enroll

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question