Discussion Locked

Non-local admin access to the network

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have a PDC and 2 BDCs in a decent NT network. I run static IPs, DNS and WINS. I have been upgrading the Windows 95 PCs to XP lately. The only problem I have is that unless the user that logs in to the PC is in the Local Admin group, they can't access anything through the network. If they try pinging anything, it eventually times out. They can't browse over the network either. When I add [domain]\domain users to the local admin group, and they log in, they can then access servers and apps over the network. My problem, is that I do not want them to be local admins, the closest thing I would like them to be is a regular user. Is there a way to do this without resorting to 3rd party software?

5 replies

by gigelul

More details:
WinXP professional or home edition?
(read about: http://www.microsoft.com/windowsxp/evaluation/default.asp )
ComputerName was added in "Server Manager"?
UserName was added in "User Manager"?
You give to users the right to use one or more computers?
Computers are configured for domain and use the same IP class?
Native WinNT and WinXP Pro didn't require any 3rd party software to work in this manner.

by gigelul

How works your users? They logon local (with computer name) or to domain (with the domain name)?
Also we have mixed OS's in network, but I don't need to add the users in any local groups. They logon on to domain and all is fine. Local we have only an Admin account for maintenance, install drivers or software. Our users didn't logon local but is possible with cached profile if require.

by gigelul

You used an upgrade product to change de OS from Win95 to WinXP (I don't know if exist someting like this)?
If yes, is possible that your problems become from this upgrade. Try to install from scratch a computer with WinXP.

by shepherr

WinNT4 servers, and WinXPO Pro workstations. This problem didn't show up in NTworkstation, Win2kPro, 95, 98, ME. The main thing is, they need to be able to use the network, without being admins on the machine.

by shepherr

Yes, computername is in ServerManager, and the users' have been in the UserManager for several years now. Computers are configed for the domain, and are in the same subnet. As stated originally, if the user (or group) are added as a local admin, it works fine. I want them to be added as a local user only, and have it work fine. Giving them local admin is not a viable option.

This discussion is closed to new replies.