?
Solved

How to change access rights on domain user accounts to be able to download programs and delete icons?

Posted on 2014-01-03
4
Medium Priority
?
671 Views
Last Modified: 2014-01-03
Hello Experts,

Can someone tell me how I go about adjusting access rights and settings on a user's profile?  We have a domain configuration using Active Directory in Windows SBS 2011 and Exchange 2010.  This user needs to be able to download programs and delete icons off their desktop without having to put in the administrator login credentials.  Where do I go to change these settings?
0
Comment
Question by:Brent Johnson
4 Comments
 
LVL 37

Expert Comment

by:Kimputer
ID: 39754198
From the Server, go to computer management (compmgmt.msc), connect to the PC in question, in the user and groups, add this user to the administrator group. Now that user has admin rights only on that computer and not on the domain.
Another way is to just go to that computer, log in as domain admin, go to compmgmt.msc and add the user to the administrator group.
0
 
LVL 22

Accepted Solution

by:
Olaf De Ceuster earned 2000 total points
ID: 39754217
The easiest way is in the SBS console under Network>computers> highlight the computer and choose computer properties > user access> make the user a local admin under access level. This is NOT a domain admin only  a local admin.

Or

In Users on the local machine make that domain user a "power user"
Hope that helps,
Olaf
0
 

Author Closing Comment

by:Brent Johnson
ID: 39754466
Thank you!  Worked instantly upon a reboot of the computer.
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39754574
For deleting desktop icons standard user do not require admin rights as he is having full access to his Profile \ desktop

Also what you mean by download programs ?
Are you talking about downloading program from internet or (install) what exactly ?

In order to download programs from internet, again you do not require admin rights.

If you want to install software, then I don't think there is any alternative available other than adding user in local admin group
Alternatively you could deploy required software's through GPO if possible

Mahesh
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
Sometimes it necessary to set special permissions on user objects.  For instance when using a Blackberry server, the SendAs permission needs to be set. I see many admins struggle with the setting that permission only to see it disappear within a few…
This Micro Tutorial will give you a basic overview of Windows Live Photo Gallery and show you various editing filters and touches to photos you can apply. This will be demonstrated using Windows Live Photo Gallery on Windows 7 operating system.
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question