[Last Call] Learn how to a build a cloud-first strategyRegister Now


XP Client join 2003 domain which local group need to join?

Posted on 2006-05-11
Medium Priority
Last Modified: 2010-04-18
Hi all:

we have a lot XP Pro client join to 2003 domain,when users login to domain access local disk will appear access deny message,we add domain user to local administrator group that work find,but we found user can change local computer setting,how to prevent it happen?
is this a good idea to add domian user to local administrator group?
should I add domain users to other local group(like power user)?

Question by:darkeryu
  • 2
  • 2
LVL 48

Expert Comment

ID: 16664172
LVL 20

Accepted Solution

Lazarus earned 2000 total points
ID: 16664271
It is NOT a good idea EVER to add the DOMAIN USER Group to the LOCAL ADMIN GROUP. Add only the particaulr user otherwise you get what you just described.
You should only ad a SPECIFIC USER ot a group when possible. Adding any DOMINA USER to the powergroup will give ALL DOMAIN USERS the ability to have POWERUSER on all machines. Is that what you want?
If not just ad the particular user to the POWER USER group.

Jay_Jay70, why bust his chops for posting that here. It does have some legitmacy in Server 2003 since it's part of the domain. He may not know that it should be in MS Network, but its not a big deal. He's obviously not a native english speaker and problem does not see the difference.

LVL 20

Expert Comment

ID: 16664277
Sorry.. JAY JAY... I see what you meant.. He obviously just does not understand... and I'm a bit of a DOLT as well.. LOL
LVL 48

Expert Comment

ID: 16664290
thats ok, i was just wondering why it was reposted when the same answer was already given

no stress

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Screencast - Getting to Know the Pipeline
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question