Solved

How to change access rights on domain user accounts to be able to download programs and delete icons?

Posted on 2014-01-03
4
661 Views
Last Modified: 2014-01-03
Hello Experts,

Can someone tell me how I go about adjusting access rights and settings on a user's profile?  We have a domain configuration using Active Directory in Windows SBS 2011 and Exchange 2010.  This user needs to be able to download programs and delete icons off their desktop without having to put in the administrator login credentials.  Where do I go to change these settings?
0
Comment
Question by:Brent Johnson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 35

Expert Comment

by:Kimputer
ID: 39754198
From the Server, go to computer management (compmgmt.msc), connect to the PC in question, in the user and groups, add this user to the administrator group. Now that user has admin rights only on that computer and not on the domain.
Another way is to just go to that computer, log in as domain admin, go to compmgmt.msc and add the user to the administrator group.
0
 
LVL 22

Accepted Solution

by:
Olaf De Ceuster earned 500 total points
ID: 39754217
The easiest way is in the SBS console under Network>computers> highlight the computer and choose computer properties > user access> make the user a local admin under access level. This is NOT a domain admin only  a local admin.

Or

In Users on the local machine make that domain user a "power user"
Hope that helps,
Olaf
0
 

Author Closing Comment

by:Brent Johnson
ID: 39754466
Thank you!  Worked instantly upon a reboot of the computer.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39754574
For deleting desktop icons standard user do not require admin rights as he is having full access to his Profile \ desktop

Also what you mean by download programs ?
Are you talking about downloading program from internet or (install) what exactly ?

In order to download programs from internet, again you do not require admin rights.

If you want to install software, then I don't think there is any alternative available other than adding user in local admin group
Alternatively you could deploy required software's through GPO if possible

Mahesh
0

Featured Post

DevOps Toolchain Recommendations

Read this Gartner Research Note and discover how your IT organization can automate and optimize DevOps processes using a toolchain architecture.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
There are many software programs on offer that will claim to magically speed up your computer. The best advice I can give you is to avoid them like the plague, because they will often cause far more problems than they solve. Try some of these "do it…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question