?
Solved

Windows 2000 Group Permission

Posted on 2003-03-14
6
Medium Priority
?
131 Views
Last Modified: 2013-12-04
As a Power User within a Windows 2000 group, a Power User is not able to run a scan disk, disk defrag or Windows Updates.  I know there is a way to make that group able to do those 3 things but I am lost trying to find it.  Going in the Local Policies, I can not seem to find where to asign it.  Any help out there?
0
Comment
Question by:TBReil
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
6 Comments
 

Expert Comment

by:jhsemrontmex
ID: 8140844
Find the folder that Scandisk etc is in. ie: C:\Document and Settings\what_ever_the_user_is\folder (use explorer)
Right click and set the permissions for this : Admin to Full control, and Power Users to Read and Execute. (not modify or full, unless u want 2 but why). Thats all in the Security options tab of the FOLDERS properties. If you then want to set specifics click the advanced button (inside the security tab) and click view/edit on the Power Users group and you'll find more NTFS permissions then you ever wanted to know about. That shoul do it.
-John S.
0
 

Expert Comment

by:jhsemrontmex
ID: 8145273
So did this help?
0
 
LVL 12

Accepted Solution

by:
trywaredk earned 80 total points
ID: 8150795
You can't use these 2 tools without being member of local admin group, because the tools needs admin acces on the whole hard disc.


HJSEMRONTMEX ... defrag is in C:\WINNT\System32\dfrg.msc


TBREIL... You are doing the right thing with security, BUT PLEASE READ THIS CAREFULLY:

You must NEVER NEVER add a Domain User Group to the Local Admin Group on each workstation.

And You must NEVER add the same Domain User to the Local Admin Group on more than his/hers own workstation

If You add a Domain Group membership to the Local Admin Group, everyone being member gets unlimited REMOTE access power of all simular workstations on Your network.

The unlimited REMOTE access involves:
1. Explorer: \\ComputerName\C$
2. Registry
3. Computer Management (Control Panel)


IF YOU WANT TO KNOW MORE ABOUT THIS ISSUE:

http://www.experts-exchange.com/Security/Win_Security/Q_20506528.html
http://www.tryware.dk/English/W2kLocalGroupPolicy/TotalAdminPower.html
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/windows2000serv/evaluate/featfunc/07w2kadc.asp
http://support.microsoft.com/?kbid=182734


IF YOU WANT TO TEST IT:
You have to add the Domain User Group to the Local Admin Group on BOTH test-workstations, and logout and logon again.

Important: You have to make a new logon after creating the credentials, because they are given in W2k in the second where You press ENTER to password when logging on.

Please reply, when You have removed the Domain User Group from the Local Admin Group again!


Many Regards

Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open.





0
 

Expert Comment

by:CleanupPing
ID: 9070706
TBReil:
This old question needs to be finalized -- accept an answer, split points, or get a refund.  For information on your options, please click here-> http:/help/closing.jsp#1 
EXPERTS:
Post your closing recommendations!  No comment means you don't care.
0

Featured Post

Get real performance insights from real users

Key features:
- Total Pages Views and Load times
- Top Pages Viewed and Load Times
- Real Time Site Page Build Performance
- Users’ Browser and Platform Performance
- Geographic User Breakdown
- And more

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
Recently, I read that Microsoft has analysed statistics for their security intelligence report. It revealed: still, the clear majority of windows users do their daily work as administrator. An administrative account is a burden, security-wise. My ar…
This tutorial will teach you the special effect of super speed similar to the fictional character Wally West aka "The Flash" After Shake : http://www.videocopilot.net/presets/after_shake/ All lightning effects with instructions : http://www.mediaf…
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…
Suggested Courses
Course of the Month14 days, 14 hours left to enroll

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question