mdnaimathullah
asked on
users permissoion
hi expoerts
i need to give permission to change tcp/ip parameters , installation software to selected users
coz when i m tyring to change the tcp/ip properties, its saying un seffection privilage . would u please tell me how can i give selected uses to change the tcp/ip parameters and instalation software
thanks in advance
i need to give permission to change tcp/ip parameters , installation software to selected users
coz when i m tyring to change the tcp/ip properties, its saying un seffection privilage . would u please tell me how can i give selected uses to change the tcp/ip parameters and instalation software
thanks in advance
Make sure that nothing in group policy is preventing this change also.
Ira @ KVR
Ira @ KVR
Naser72's method is not going to work unless you are already logged into the users computer with an administrators account. you can go to the control panel - user accounts - hold down the shift key + right click the mouse and this will bringup the run as command - click Run as... - Select The Following User and input your username (format is DOMAIN\USERNAME, if its not a domain then put COMPUTERNAME\ADMINACCOUNT) and password - Click Add - Type in the username and domain and hit next - Select Other and choose Administrators and hit ok. Then you will need to log the user account out and back in again.
Note...you can usually just use a run as to install programs as well or just use remote desktop to remotely work on a users machine.
Note...you can usually just use a run as to install programs as well or just use remote desktop to remotely work on a users machine.
ASKER
thanks for reply
i creat users (moon) on domain, and login on workstation as a users.
smacky311 i used ur method and i add my particular user (moon) into administrator. and when i went to change the tcp/ip properties its working.
its means user (moon) got local administrator permission on that particular workstation (computer) or any other computer also.
-------------------------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- ---------- -------
there is any way on domain to give permission to users to change the tcp/ip properties etc...., coz y i m asking this question mean.
eg : i have one domain with dns server. now i want to give some users to access internet permission. how can i do
thanks
i creat users (moon) on domain, and login on workstation as a users.
smacky311 i used ur method and i add my particular user (moon) into administrator. and when i went to change the tcp/ip properties its working.
its means user (moon) got local administrator permission on that particular workstation (computer) or any other computer also.
--------------------------
there is any way on domain to give permission to users to change the tcp/ip properties etc...., coz y i m asking this question mean.
eg : i have one domain with dns server. now i want to give some users to access internet permission. how can i do
thanks
On the server (I assume in windows server 2003) Go to start - run - type lusrmgr.msc and hit ok - Right click the user - properties - Click Member of tab - Add - Type Administrators - click check name (it should underline) - click ok to save changes. You will need to do this to every user you want to make an administrator on the entire domain.
The original method I gave you enables administrative rights for only the local machine, not across the entire domain.
The original method I gave you enables administrative rights for only the local machine, not across the entire domain.
smacky311,
>>Naser72's method is not going to work unless you are already logged into the users computer with an administrators account
Agree but If this method will not work then because of lack of Admin Password, how can your method will work? because both ways require ADMIN PASSWORD, as you metion in your Post
>>you can go to the control panel - user accounts - hold down the shift key + right click the mouse and this will bringup the run as command - click Run as... - Select The Following User and input your username (format is DOMAIN\USERNAME, if its not a domain then put COMPUTERNAME\ADMINACCOUNT) and password
mdnaimathullah,
It's better if you post more info in your Question so we can help you more and much faster, i.e. are you in Workgroup or Domain?
This is already answered above, after some discussion above.
I'm wondering what is your function in your LAN? If you are the administrator, then all you need to do is:
"Assuming that all those machines are already joined to the domain"
Using a domain admin account will do the job for you by logging into the machine and then following the steps I mentioned above.
Good luck
>>Naser72's method is not going to work unless you are already logged into the users computer with an administrators account
Agree but If this method will not work then because of lack of Admin Password, how can your method will work? because both ways require ADMIN PASSWORD, as you metion in your Post
>>you can go to the control panel - user accounts - hold down the shift key + right click the mouse and this will bringup the run as command - click Run as... - Select The Following User and input your username (format is DOMAIN\USERNAME, if its not a domain then put COMPUTERNAME\ADMINACCOUNT)
mdnaimathullah,
It's better if you post more info in your Question so we can help you more and much faster, i.e. are you in Workgroup or Domain?
This is already answered above, after some discussion above.
I'm wondering what is your function in your LAN? If you are the administrator, then all you need to do is:
"Assuming that all those machines are already joined to the domain"
Using a domain admin account will do the job for you by logging into the machine and then following the steps I mentioned above.
Good luck
ASKER
thanks
my network is on domain, few computer was on workgroup and when i make a mamber of domain, few users they unable to uses some software, when i login as a domain's users its saying un seffestion privilage. but when i login as a local computer its working.
thus y i need to give permission to access local computer software
on domain i cant add users into administrator group. its gona b dangor.
u means i mean i must add domain user into local admin group.
my network is on domain, few computer was on workgroup and when i make a mamber of domain, few users they unable to uses some software, when i login as a domain's users its saying un seffestion privilage. but when i login as a local computer its working.
thus y i need to give permission to access local computer software
on domain i cant add users into administrator group. its gona b dangor.
u means i mean i must add domain user into local admin group.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
>>few users they unable to uses some software, when i login as a domain's users its saying un seffestion privilage. but when i login as a local computer its working.
thus y i need to give permission to access local computer software
When you join a user to a domain their default permission will be restricted users, but once you join a machine to the domain and login with a domain admin account , then you can add whoever you want to the local administrators group.
Let me know if you need more assistance.
Naser
thus y i need to give permission to access local computer software
When you join a user to a domain their default permission will be restricted users, but once you join a machine to the domain and login with a domain admin account , then you can add whoever you want to the local administrators group.
Let me know if you need more assistance.
Naser
ASKER
thanks
naser if i add users into admin account, is it nt dangour, if he/she know the permission they might misuse or they can change other settings.
naser if i add users into admin account, is it nt dangour, if he/she know the permission they might misuse or they can change other settings.
Yes, It's,
He will be able to have absolute priviledge in the machine and he can do every thing starting from installing a new software and exposed to the spywares that come from the internet and made serious changes in his machine.
I understand your concerns; you wanted them to do thier work with less supervision, this is can be done with some supervision at the beggining and then you will have all the rest you are looking for, Here is my scenario it might help you:
1. I restrict all users including the General Manager, and No one has the right to install any thing in his machine unless he got a written approval from me as an IT Manager.
2. Then I make those users that I can trust in their knowledge of IT i.e. "IT Dept" full priviledge only in thier machine.
3. Every machine has default local admin account which is already renamed "For security reasons" into some thing only me and the help desk know it with its password.
4. If anyone wanted to install some thing he might need to do his job, then all he need to do just call the help desk and install it for him, using the local admin account.
5. In case he faces a problem using that software, then he do what I've posted above, and then once he finished installing the software he removes him from the local admin group.
6. Create a company policy that will hit those whom playing around your concerns, so no one else will even think to do the same in the future.
This is my experience as an IT Manager in a company with ~100 users.
With this you can work safely, less supervision and you can have a nice dreams during your sleep instead of nightmares... :)
Good luck,
Naser
Naser
He will be able to have absolute priviledge in the machine and he can do every thing starting from installing a new software and exposed to the spywares that come from the internet and made serious changes in his machine.
I understand your concerns; you wanted them to do thier work with less supervision, this is can be done with some supervision at the beggining and then you will have all the rest you are looking for, Here is my scenario it might help you:
1. I restrict all users including the General Manager, and No one has the right to install any thing in his machine unless he got a written approval from me as an IT Manager.
2. Then I make those users that I can trust in their knowledge of IT i.e. "IT Dept" full priviledge only in thier machine.
3. Every machine has default local admin account which is already renamed "For security reasons" into some thing only me and the help desk know it with its password.
4. If anyone wanted to install some thing he might need to do his job, then all he need to do just call the help desk and install it for him, using the local admin account.
5. In case he faces a problem using that software, then he do what I've posted above, and then once he finished installing the software he removes him from the local admin group.
6. Create a company policy that will hit those whom playing around your concerns, so no one else will even think to do the same in the future.
This is my experience as an IT Manager in a company with ~100 users.
With this you can work safely, less supervision and you can have a nice dreams during your sleep instead of nightmares... :)
Good luck,
Naser
Naser
ASKER
thanks a lot naser/ smacky 311
realy u both help me a lot, now i m confusing to whome i should give the points.
is there any way where i can spilt the points between both of u
and naser is there any chance if i need to get the hold of u in future, means any contact e-mail if u dnt mind
realy u both help me a lot, now i m confusing to whome i should give the points.
is there any way where i can spilt the points between both of u
and naser is there any chance if i need to get the hold of u in future, means any contact e-mail if u dnt mind
ASKER
hi there i have a problem
can u pls help me, how can i give users permission on 2000 and 98 machine
my question is same as above
thanks
can u pls help me, how can i give users permission on 2000 and 98 machine
my question is same as above
thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks alot for ur support
Glad to see you make it, and thanx 4 the points.
Naser
Naser
Make them administrators on the local machine as follow:
right click on my computer>Manage>local users and groups>double click on groups>choose administrators>add>choose the users you want to make them administrators.
Good Luck!
Naser