Questions

Domain users .. with Local PC admin rights

Tags:
+
0 Votes
Locked

Domain users .. with Local PC admin rights

jayan_k
Hi,
i am using windows 2003 server and winxp for client machine.All clients are part of domain. our clients are using Oracle application which requires the admin rights in local machhine. I have added usersa in adminstrtator group in local machines. But since i have added to admin groups they have the rights to change the LAN properties. I even disabled from GPO it didn't work. If i don't add the users in local admin groups then they don't have the rights to chane the LAN. How can i block the users changing the LAN properties ?
  • +
    0 Votes
    dan.cox

    Will the Oracle application work with power user rights rather than administrator rights? Try that.
    We never enable admin rights for any users and we use Oracle applications. For us they work fine with power user rights.

    +
    0 Votes
    NotSoChiGuy

    Test out running the Oracle apps using RUN AS (using a local PC admin account) while logged in as a restricted user. You may need to also give read/write access to certain folders in the %windir% (you'd have to check out the Oracle KB on the specific application to know for sure).

    I've been able to pull this off with other apps.

    Hope this helps. Good luck!

    +
    0 Votes
    vsharma

    hi
    I am vijay. You want domain users should have admin rights on the local PC , right. for this do one thing
    Go to my comuter properties and select computer tab,then add the client computer again to domain with Network ID option , them next next next , after this will ask u abt the user paswd and domain , type the user/paswd of that account which hv right to add client to domain.then a msg box comes click no here. after that it will ask for computer name and domain .type all the information.thena it will again ask for usr/paswd/domain again type the usr/paswd of that user which hv right to add the clients to domain.on the next window it will ask add the following user, now right the name of that domain user to which u wanna give the admin rights on that machine.click next. on the next window it will ask u that which type of access u wanna give to that user click others and select administrator and press next , nw ur computer will restart and the usr that u had added will hv admin rights on that machine.

    +
    0 Votes
    sba.afghani

    in here u need to do this on each machine.
    how to apply this on Active Directory and get the result on all machines?

    +
    0 Votes
    Jacky Howe

    How to Configure a Global Group to Be a Member of the Administrators Group on all Workstations

    http://support.microsoft.com/default.aspx?scid=kb;en-us;320065

  • +
    0 Votes
    dan.cox

    Will the Oracle application work with power user rights rather than administrator rights? Try that.
    We never enable admin rights for any users and we use Oracle applications. For us they work fine with power user rights.

    +
    0 Votes
    NotSoChiGuy

    Test out running the Oracle apps using RUN AS (using a local PC admin account) while logged in as a restricted user. You may need to also give read/write access to certain folders in the %windir% (you'd have to check out the Oracle KB on the specific application to know for sure).

    I've been able to pull this off with other apps.

    Hope this helps. Good luck!

    +
    0 Votes
    vsharma

    hi
    I am vijay. You want domain users should have admin rights on the local PC , right. for this do one thing
    Go to my comuter properties and select computer tab,then add the client computer again to domain with Network ID option , them next next next , after this will ask u abt the user paswd and domain , type the user/paswd of that account which hv right to add client to domain.then a msg box comes click no here. after that it will ask for computer name and domain .type all the information.thena it will again ask for usr/paswd/domain again type the usr/paswd of that user which hv right to add the clients to domain.on the next window it will ask add the following user, now right the name of that domain user to which u wanna give the admin rights on that machine.click next. on the next window it will ask u that which type of access u wanna give to that user click others and select administrator and press next , nw ur computer will restart and the usr that u had added will hv admin rights on that machine.

    +
    0 Votes
    sba.afghani

    in here u need to do this on each machine.
    how to apply this on Active Directory and get the result on all machines?

    +
    0 Votes
    Jacky Howe

    How to Configure a Global Group to Be a Member of the Administrators Group on all Workstations

    http://support.microsoft.com/default.aspx?scid=kb;en-us;320065