User cannot run .exe programs while logged into the domain... why not?

I'm running a 2003 SBS running Active Directory.  My clients have notebooks and authenticate to the domain via the DControllers in my network.  When logged into the domain they are unable and/or locally on their notebooks, they are unable to run some .exe files and get an error.  For example, one of my guys got a virus and I put the .exe removal tool on a shared drive, when my user went to run it he got an error saying he needs an Administrator to run it.  I don't want that, i'm thinking I screwed up somewhere in my AD Users & Computers.  What builtin group do they need to be members of?  They are already local Administrators of their notebooks however I think the DC Policy's over-ride it???
yoyzAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
eedleeConnect With a Mentor Commented:
Make sure "domain users" is a member of the local Administrators in computer management and confirm that the default group for each user is "domain user" in AD.
0
 
yoyzAuthor Commented:
so when they're not a member of this group I hear that users can run only about 80% of .exe's.  That's wierd.  I'll add them and see what happens.  Thanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.