Solved

How to change access rights on domain user accounts to be able to download programs and delete icons?

Posted on 2014-01-03
4
660 Views
Last Modified: 2014-01-03
Hello Experts,

Can someone tell me how I go about adjusting access rights and settings on a user's profile?  We have a domain configuration using Active Directory in Windows SBS 2011 and Exchange 2010.  This user needs to be able to download programs and delete icons off their desktop without having to put in the administrator login credentials.  Where do I go to change these settings?
0
Comment
Question by:Brent Johnson
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 35

Expert Comment

by:Kimputer
ID: 39754198
From the Server, go to computer management (compmgmt.msc), connect to the PC in question, in the user and groups, add this user to the administrator group. Now that user has admin rights only on that computer and not on the domain.
Another way is to just go to that computer, log in as domain admin, go to compmgmt.msc and add the user to the administrator group.
0
 
LVL 22

Accepted Solution

by:
Olaf De Ceuster earned 500 total points
ID: 39754217
The easiest way is in the SBS console under Network>computers> highlight the computer and choose computer properties > user access> make the user a local admin under access level. This is NOT a domain admin only  a local admin.

Or

In Users on the local machine make that domain user a "power user"
Hope that helps,
Olaf
0
 

Author Closing Comment

by:Brent Johnson
ID: 39754466
Thank you!  Worked instantly upon a reboot of the computer.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39754574
For deleting desktop icons standard user do not require admin rights as he is having full access to his Profile \ desktop

Also what you mean by download programs ?
Are you talking about downloading program from internet or (install) what exactly ?

In order to download programs from internet, again you do not require admin rights.

If you want to install software, then I don't think there is any alternative available other than adding user in local admin group
Alternatively you could deploy required software's through GPO if possible

Mahesh
0

Featured Post

SharePoint Admin?

Enable Your Employees To Focus On The Core With Intuitive Onscreen Guidance That is With You At The Moment of Need.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question