Security

Ask something
Question Locked

Local user rights

0 helpful
3 replies

by rongaya

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

All pc's run Win XP SP2. I am a new AD Admin and I am trying to improve security on our network. Seems like the previous Admin did not care much about security. All users were users in the domain but were local administrators on their pc's. I have removed all users from the local Administrators group and now running into the following problems. This is only happening to a few pc's:
1) Getting an error message " Cannot Start Microsoft Outlook".
2) They loose their desktop settings.
How can they be local users and be able to open their Outlook and keep their desktop settings?

3 replies

by retro77

I would look at permissions on the Program Files folder where Outlook is installed. Also are they opening additional PSTs that are in a folder that it locked down to only Local Admins?

The desktops settings, no idea. Thats just weird. What settings are getting lost? Entire new profile built? Could be that the ACL on the Documents and Settings\username was re-ACLed to Local Admins instead of Domain\username.

by maravarman1983

Make all the user(domain user) the member of power user(standard user)in the corresponding local sysytem

The member of power user cannot install software that affects system setting

If need to install any software log on as administrator of the local computer and install the software,the installed software can be executed via the user account

don't forget to set password for the local administrator

This discussion is closed to new replies.