General discussion


Hybrid User profile in Win2000

By Oliphant ·
Has anyone figured a way to make a hybrid desktop user or the best profile for users that can't have administrator rights, or power user rights, but need a little more than standard user? The Domain controllers are Win NT 4.0.

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

Hybrid User profile in Win2000

by bburdzel In reply to Hybrid User profile in Wi ...

I assume you are referring to s/w that require power user rights in order to function properly. (i.e. in order to run quarkxpress you either need to have power user rights, or give users write permissions to the c:program files:quarkxpress folder) We use group policies to do that. Goto control panel>administrative tools>Active Directory Users and Computers (may need to install adminpak.msi from the windows 2k or resource kit CD). Once in, rt. click the OU containing the Users AND Computers and choose properties. Edit the group policy or create a new one. Add the specific folders and registry keys to which access is needed in the computer config:windows settings:security settings:file system and :registry respectively. Then set the security for 'Domain Users' to whatever is required. Reboot the client machines and the settings will take effect.

If you need help determining where access is needed download filemon (file monitor) and regmon (registry monitor) utilities from While the monitors are running start up the troubled programs and look for Access Denied errors in the monitor logs. These are the keys that need access.

for more info search the microsoft knowledgebase for 'gpo' or 'group policy object'

Related Discussions

Related Forums