?
Solved

User keeps changing settings. Please advise.

Posted on 2004-11-08
7
Medium Priority
?
236 Views
Last Modified: 2013-12-04
Ok, I'm a network tech for roughly 100-150 users.

 One user has unshared her C$ and has also disabled file and print sharing. She was trying to secure her machine , but instead made my job 10x harder. I can no longer access her computer remotely and will have to drive on site (30 miles) to change everything back.  This has been an ongoing problem since my boss refuses to implement ANY group policy what so ever. Furthermore, every user is an admin of their local PC.

Today I plan to
1. Put the default share back on her C$. She disbled it in the registry (I cant even connect via "Computer Management" anymore)
2. Re-enable file and print sharing.


What should I do? Downgrade her account to just a user?
Define some local policies (since its all I can do)?
0
Comment
Question by:dissolved
  • 4
  • 3
7 Comments
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12525078
Hi
You could downgrade her to a restricted user which would prevent all the above from happening again. If you keep any user as a local admin then they can pretty much do anything that they want to the local machine. If you define local policies then without some pretty clever tweaking you enable those policies for everyone, including yourself and yet as local admins they can still get in and change what you've done.

I'd keep a log of all the times that lack of group policy has caused additional unnecessary work, add up the real cost in time and expense and at some point when it's become outrageous, present it to your boss, who is the real baddy in this scenario,

Deb :))
0
 

Author Comment

by:dissolved
ID: 12525456
THanks Deb.
I forgot to clarify that this is a domain account she is using. Not a local account. She has admin access to her local machine.   In other words, she is a member of her local administrators group.

If I make her a member of her local "USERS" group, will that solve the problem?
Thanks
0
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12525513
Yep - on the problem pc (lol on on every pc would be better!)- Run lusrmgr.msc from a command prompt on an admin logon and simply remove the domain account from the local administrators group and add it instead to the users group or at a push to the power users group - The only disadvantage with the users group is that there's very little that they can do locally, and they won't be able to install software. A great thing in my book, but depends on the needs of your company.

Deb :))
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:dissolved
ID: 12525975
Is there a way to run lusrmgr remotely? Or is this something I have to do physically at the pc
Thanks for the help!
0
 
LVL 20

Accepted Solution

by:
Debsyl99 earned 2000 total points
ID: 12526058
Well you can do it using using startup scripts via group policy - but you can't use group policy......

But you can try this: If you can remote or login locally to a server, then you should be able open active directory users and computers snap in. Locate the machine, right-click and select manage. It needs to be online to do this. You can then administer membership from local users and groups remotely,

Deb :))
0
 

Author Comment

by:dissolved
ID: 12526779
Thanks Deb
0
 
LVL 20

Expert Comment

by:Debsyl99
ID: 12526939
Glad to help :))
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In today's information driven age, entrepreneurs have so many great tools and options at their disposal to help turn good ideas into a thriving business. With cloud-based online services, such as Amazon's Web Services (AWS) or Microsoft's Azure, bus…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Is your data getting by on basic protection measures? In today’s climate of debilitating malware and ransomware—like WannaCry—that may not be enough. You need to establish more than basics, like a recovery plan that protects both data and endpoints.…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question