Why Do users need Server Admin Rights

Posted on 2011-10-06
Medium Priority
Last Modified: 2012-05-12
Hi All,

I've just set-up a Windows 2008r2 Server with Remote Desktop Services, all is fully working user Group Policy & User Profiles Via GP.

The Server is for basic MS Office Applications and Sage CRM Web Application.

I've created a Domain Group Called "RDS Users" and added the 5 users.

Office Apps work brilliant without being a member of the Server\Administrators Group, however Part of the CRM Web App does not.

The CRM Sage is a internal web site, not an actual client bit of softare, we run it by simply http://server/crm.  

It uses Active X.

If we add the group to the local Administrators Group it works great, but soon as we remove it stops loading the Active X part and bit stop working within the page.

I've tried using the power group but this does not work.

Does anyone know any other way of give a user / group full access other than adding them to a Administrators Group ?


5 Users.

Question by:roger_patel

Expert Comment

ID: 36925715
You may have to grant the users permission to launch Active X via your GPO.

Author Comment

ID: 36925728
any chance you could let me know how, i've tried but not had any luck ?  looking into it more and more i think needs some sort of other access, SAGE are not offering any help other than saying users need FULL local admin rights

Accepted Solution

Kenmcse1969 earned 1000 total points
ID: 36925742
Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.


Author Comment

ID: 36925759

trying that right now

Author Comment

ID: 36925775
I cant add the  ActiveX Installer Service as i have Windows 2008, its not in the list ? have you done this before buddy

Author Comment

ID: 36925799

Author Comment

ID: 36929830
Hi there,

getting there but cant seem to get it working correctly.

I'm now get the error in the event viewer on the server and cant seem to resolve.

Attempt to install control http://bwi-fs03/crm/Plugin/eWarePluginX.cab failed. The host URL http://bwi-fs03 is not in policy

the above error happens when i open the crm web app and it attempts to install the plugin.

In the group policy i have added the below :
"Approved Installation Sites for ActiveX Controls"
http://bwi-fs03, with a value of 1,1,1,1

Does anyone know what i am doing wrong


Expert Comment

ID: 36929937
Look at Privilege Authority, a free program from ScriptLogic. It allows you to create Group Policy Objects based on a Rule. The rules can apply to Programs, Folders or ActiveX object. Basically you create rules that allow these Programs, Folder or ActiveX objects to have higher permissions while the User account remains at a User permission level,

Author Comment

ID: 37388840
I've requested that this question be closed as follows:

Accepted answer: 0 points for roger_patel's comment http:/Q_27383877.html#36929830

for the following reason:

Changed complete method due to time, thanks to all for the help.

Author Comment

ID: 37388841

Author Closing Comment

ID: 37388851
This partially helped, however due to time our we decided to allow the users admin rights in the end..

Featured Post

Restore individual SQL databases with ease

Veeam Explorer for Microsoft SQL Server delivers an easy-to-use, wizard-driven interface for restoring your databases from a backup. No expert SQL background required. Web interface provides a complete view of all available SQL databases to simplify the recovery of lost database

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you are trying to access the server, have you ever encountered "The terminal server has exceeded the maximum number of allowed connection" error?  or "The user is attempting to log on to a Terminal Server in Remote Administration mode, but the …
Introduction: Sometimes when I receive a call from my users to solve their problems it is very difficult for me to found their computer IP address. Even finding their computer Host to provide remote support can be a problem.  So I resorted to Goo…
Are you ready to place your question in front of subject-matter experts for more timely responses? With the release of Priority Question, Premium Members, Team Accounts and Qualified Experts can now identify the emergent level of their issue, signal…
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question