asked on
looking for a tool
In my organization we have a locked down the users and just gave them power rights. We noticed that recently users are able to install applications. Do you know of any tool that can help us determine why is this happening.
The OS is Windows XP.
Thank you
The OS is Windows XP.
Thank you
Windows XPPCSecurity
Last Comment
Habi Z
Any reason why you didn't use Limited Users? Power Users is NOT locked down.....
A member of the Power Users group may be able to gain administrator rights and permissions in Windows Server 2003, Windows 2000, or Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;825069
Excerpt....
By default, the rights and permissions that are granted to the Power Users group include those rights and permissions that are required to allow members of the Power Users group to modify computer-wide settings, to install drivers, and to run (or install) non-certified programs.
http://support.microsoft.com/default.aspx?scid=kb;en-us;825069
Excerpt....
By default, the rights and permissions that are granted to the Power Users group include those rights and permissions that are required to allow members of the Power Users group to modify computer-wide settings, to install drivers, and to run (or install) non-certified programs.
ASKER
We had this for while when a user is part of the power group he or she was not able to install any programs or msi files. They were not able to access the user account with out entering the administrator password. We only have windows servers.
I need to solve the issue.
I need to solve the issue.
ASKER
Also I need another Tool that will show what groups the user is part of. Do you think this has to do with the user priviledges or PC priveledges.
Thanks,
Thanks,
Limited users can login to the machine with no problems... Whats the error when you have a limited user logon?
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Then use command line
gpresult
The link is
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/gpresult.mspx?mfr=true
gpresult
The link is
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/gpresult.mspx?mfr=true
Another point to consider is how you are locking them down. From experience, if you do not use the MS Installer service and modify no system files or keys in the HKLM branch, a standard user account can install software. Further, newer versions of Windows are virtualizing those spaces so it is even less of a hindrance.
ASKER
Good it gave me a way to look for the results.