We’re migrating existing Win2K client devices from a NetWare network to a Win2K network. Previously, our users have been administrators of their own devices and all apps are already installed. As we migrate these devices to the Win2K network, the new user accounts are in the Domain Users group; however, we’re finding NUMEROUS problems with users losing admin rights to their own devices. Most notably, we keep having authority issues running applications. We’re to the point now where we’re contemplating putting all users in the Domain Admins group to give them local admin rights, and removing the Domain Admins group from the Administrators group so they won’t have Domain admin rights. It seems ridiculous that the Domain Users group evenexists if pre-installed software applications won’t run with those rights!! Any thoughts/suggestions would be greatly appreciated. And why is there not Domain Power Users group that automatically gets added to the local Power Users group when the device joins the domain??
What should we be doing for rights on our Win2K devices??