Questions

Permissions in Domain environment

+
0 Votes
Locked

Permissions in Domain environment

hvmadhuna
Hi!

I have a windows server 2003 domain controller along with two other application servers.

I created a new user in the Active Directory and logged onto the domain using his credentials from his desktop computer which is running WinXP Pro Sp2.

While testing - I found out that Iam not able to save any files I created onto the "C" Drive or the "D" Drive, but I am able create a
folder on "C" or "D" Drives and then I can save files inside the folders. Iam also able to save onto My Documents and Desktop.

The error I get when trying to save onto "C" or "D" Drive is - "You do not have permissions to save in this Directory. See the administrator to obtain permission"

I logout the user and login as the aministrator of the domain - right click "My Computer" - Manage and in the Groups - Administrator - I added the user as the member of administrator group - This way Iam able to save files anywhere - Obviously.

Can anybody pl let me know what is the issue?

I do not have any group policies - or the local security policy of the Domain Controller and the User Computer are all "not defined"

Thank you in advance.

Ven
  • +
    0 Votes
    p.j.hutchison

    This is normal. A Standard user can only save files to their Documents or Desktop folder in c:\Documents and settings\<username>\.

    If you wanted to save elsewhere then the administrator of the PC will need to apply rights to the appropiates folders and drives first (add Users group to the Security tab and given RW or modify rights).

    Power Users have more rights than Limited users and will be save anywhere . You can add the Domain Users group to the local Power Users group to get more rights.

    +
    0 Votes
    hvmadhuna

    Hi! Thank you for the reply.
    Will try it out and get back to you.
    Thank a lot. :)

    +
    0 Votes
    hvmadhuna

    Hi! There,
    Ok, So I understand that the rights can be given in 2 ways - 1) On the user computer (add the domain Users group to the Security tab and given modify rights).
    2) Or add the Domain Users group to the local Power Users group of the user computer.

    I see that I have to do this change manually to all the users computers which will be laborious task with many users.
    Is there a way to do it on the domain - but still keep the users as limited users?

    Thanks a lot. I appreciate your help.

  • +
    0 Votes
    p.j.hutchison

    This is normal. A Standard user can only save files to their Documents or Desktop folder in c:\Documents and settings\<username>\.

    If you wanted to save elsewhere then the administrator of the PC will need to apply rights to the appropiates folders and drives first (add Users group to the Security tab and given RW or modify rights).

    Power Users have more rights than Limited users and will be save anywhere . You can add the Domain Users group to the local Power Users group to get more rights.

    +
    0 Votes
    hvmadhuna

    Hi! Thank you for the reply.
    Will try it out and get back to you.
    Thank a lot. :)

    +
    0 Votes
    hvmadhuna

    Hi! There,
    Ok, So I understand that the rights can be given in 2 ways - 1) On the user computer (add the domain Users group to the Security tab and given modify rights).
    2) Or add the Domain Users group to the local Power Users group of the user computer.

    I see that I have to do this change manually to all the users computers which will be laborious task with many users.
    Is there a way to do it on the domain - but still keep the users as limited users?

    Thanks a lot. I appreciate your help.