Local user rights

By rongaya ·
All pc's run Win XP SP2. I am a new AD Admin and I am trying to improve security on our network. Seems like the previous Admin did not care much about security. All users were users in the domain but were local administrators on their pc's. I have removed all users from the local Administrators group and now running into the following problems. This is only happening to a few pc's:
1) Getting an error message " Cannot Start Microsoft Outlook".
2) They loose their desktop settings.
How can they be local users and be able to open their Outlook and keep their desktop settings?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by retro77 In reply to Local user rights

I would look at permissions on the Program Files folder where Outlook is installed. Also are they opening additional PSTs that are in a folder that it locked down to only Local Admins?

The desktops settings, no idea. Thats just weird. What settings are getting lost? Entire new profile built? Could be that the ACL on the Documents and Settings\username was re-ACLed to Local Admins instead of Domain\username.

Collapse -

user permissions

by maravarman1983 In reply to Local user rights

Make all the user(domain user) the member of power user(standard user)in the corresponding local sysytem

The member of power user cannot install software that affects system setting

If need to install any software log on as administrator of the local computer and install the software,the installed software can be executed via the user account

don't forget to set password for the local administrator

Related Discussions

Related Forums