Solved

Group membership

Posted on 2004-09-14
13
412 Views
Last Modified: 2011-06-07
when I create a new user in the workstation(WXP) from control panel---->user account, then it ask me for a user account and domain name, I fill out those text boxes then in the next window in the group membership I choose administrators.

My questions is what are the privileges of this membership(administrators) compared to the others.
0
Comment
Question by:Chuckbuchan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 6
13 Comments
 
LVL 15

Expert Comment

by:Yan_west
ID: 12058940
Administrator has full access to every feature on your XP system. (Locally, not on the network). You can install application, change all settings in the control pannel, delete critical files. You can do everything.

Power Users can still install some software.. but it doesnt always work very well, they also have some restricted access to different windows components..
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12058961
Here is a good explanation of the different groups:

http://www.techtutorials.com/tutorials/xp/managing_groups.shtml
0
 

Author Comment

by:Chuckbuchan
ID: 12058980

if I leave the group membership for a user as administartor, is there any other way in group policy, where can I do more restrictions, like preventing the user(administrator) from installing software and downloading software and networkplace browsing limitation, I mean instead of letting him browse the entire network, I would like to limit him just for some few places.
0
Report: Liquid Web beats Amazon, Rackspace & More

A study by performance analyst firm Cloud Spectator finds that Liquid Web beats rivals Amazon, Rackspace and DigitalOcean when it comes to website and cloud application performance.

 
LVL 15

Expert Comment

by:Yan_west
ID: 12058997
Yes, you can still do that via Group Policies on your domain controller.. Local administrator doesnt mean administrator of all the network :)..
0
 

Author Comment

by:Chuckbuchan
ID: 12059034
You know in GPO, there are thousands of snap-ins, is there any direction where to get to the right snap-in to configure that.
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12059092
Go on your domain controler

open active directory users and computers, right click your domain, properties..

click the group policy tab, and edit the domain policy. go to user configuration, and open administrative templates. Then browse around.. Btw, if you change it there, it will apply it too all users on your domain. If you want only to apply it to 1 user, or a group of user, right click you domain, and create a new OU, (organizational UNIT). After, move the desired users in it. After, right click the OU, properties, go to the Group policy tab, and do the same thing that you do for your entire domain. You may have to create a new template.. just click new to do it.
0
 

Author Comment

by:Chuckbuchan
ID: 12059146
I went there before, but I looked for a bunch of snap-ins and didn't find the one I was looking for. to prohibit the software downloads from internet, prohibit software installation from CD, Floppy drive, and limiting the user to browse only a limited area of the network.

When I get the respective snap-ins then I will think about how to group users.
0
 

Author Comment

by:Chuckbuchan
ID: 12059197
I went to user configuration-------->Administrative template
I looked on the following nodes:
Start menu and Task bar
Desktop
Active desktop
Active directory

but they don't have exactely what I needed
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12060539
By the way, to prohibit software download and internet usage you'll need a sofware like this.. more like a proxy, or an internet gateway..

http://www.surfcontrol.com/products/web/
0
 

Author Comment

by:Chuckbuchan
ID: 12064170
We have a watchguard firewall on the network for filtering and web blocking. Is the surfcontrol has an option to prohibit the download for specific users  or groups?
0
 
LVL 15

Expert Comment

by:Yan_west
ID: 12064254
Yes it has.. you can even limit browsing hours, browsing by IP, Mac address, Machine name, user name­. You can specify the type of download you want to allow.. You can forbid EXE download, but accept .doc, or mp3.. or you can disable everything. You can also prohibit people from going to certain categories of sites.. You can block streaming, or allow only streaming during certain hours..

The possibilities are limitless. :)
0
 

Author Comment

by:Chuckbuchan
ID: 12064409
what does Watchguard firewall has and Surfcontrol doesn't and vice-versa, because It wouldn't make sense to have them both for the purpose of doing the same job.

well, what about prohibiting users from installing software through CDs and floppy drives. there should be a GPO that takes care of this, but I couldn't find it.
0
 
LVL 15

Accepted Solution

by:
Yan_west earned 500 total points
ID: 12064552
Watchguard is a firewall, and does other things too, but is not specialized.

Surfcontrol does Internet Management/control, filters, Give you the ability to do reports on the internet usage of your users, and let you control ALL aspects of their internet usage.. you can also block access to certain ressources on your network via it.


Prevent access to drives from My Computer via gpo
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/gp/340.asp
0

Featured Post

NEW Veeam Agent for Microsoft Windows

Backup and recover physical and cloud-based servers and workstations, as well as endpoint devices that belong to remote users. Avoid downtime and data loss quickly and easily for Windows-based physical or public cloud-based workloads!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
NIC teaming VMware vSwitch 9 62
Websites pages will not open in any browser 7 57
Network monitoring - have you used Datadog? 7 58
Network access 24 60
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question