• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 462
  • Last Modified:

Why Do users need Server Admin Rights

Hi All,

I've just set-up a Windows 2008r2 Server with Remote Desktop Services, all is fully working user Group Policy & User Profiles Via GP.

The Server is for basic MS Office Applications and Sage CRM Web Application.

I've created a Domain Group Called "RDS Users" and added the 5 users.

Office Apps work brilliant without being a member of the Server\Administrators Group, however Part of the CRM Web App does not.

The CRM Sage is a internal web site, not an actual client bit of softare, we run it by simply http://server/crm.  

It uses Active X.

If we add the group to the local Administrators Group it works great, but soon as we remove it stops loading the Active X part and bit stop working within the page.

I've tried using the power group but this does not work.

Does anyone know any other way of give a user / group full access other than adding them to a Administrators Group ?


5 Users.

1 Solution
You may have to grant the users permission to launch Active X via your GPO.
roger_patelAuthor Commented:
any chance you could let me know how, i've tried but not had any luck ?  looking into it more and more i think needs some sort of other access, SAGE are not offering any help other than saying users need FULL local admin rights
Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

roger_patelAuthor Commented:

trying that right now
roger_patelAuthor Commented:
I cant add the  ActiveX Installer Service as i have Windows 2008, its not in the list ? have you done this before buddy
roger_patelAuthor Commented:
roger_patelAuthor Commented:
Hi there,

getting there but cant seem to get it working correctly.

I'm now get the error in the event viewer on the server and cant seem to resolve.

Attempt to install control http://bwi-fs03/crm/Plugin/eWarePluginX.cab failed. The host URL http://bwi-fs03 is not in policy

the above error happens when i open the crm web app and it attempts to install the plugin.

In the group policy i have added the below :
"Approved Installation Sites for ActiveX Controls"
http://bwi-fs03, with a value of 1,1,1,1

Does anyone know what i am doing wrong

Look at Privilege Authority, a free program from ScriptLogic. It allows you to create Group Policy Objects based on a Rule. The rules can apply to Programs, Folders or ActiveX object. Basically you create rules that allow these Programs, Folder or ActiveX objects to have higher permissions while the User account remains at a User permission level,
roger_patelAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for roger_patel's comment http:/Q_27383877.html#36929830

for the following reason:

Changed complete method due to time, thanks to all for the help.
roger_patelAuthor Commented:
roger_patelAuthor Commented:
This partially helped, however due to time our we decided to allow the users admin rights in the end..
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Cloud Class® Course: Python 3 Fundamentals

This course will teach participants about installing and configuring Python, syntax, importing, statements, types, strings, booleans, files, lists, tuples, comprehensions, functions, and classes.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now