- User default permissions in Windows Server 2003
- Posted by KD on January 27th, 2005
Whenever I create a new user in our W2k3 domain, the user automatically has
admin rights to their local workstation. The user is a member of the Domain
Users Group ONLY.
Is having local admin rights to their local workstation default?
Thanks !!
KD
- Posted by Doug Sherman [MVP] on January 27th, 2005
No, the default is that domain administrators are members of the local
administrators group and domain users are members of the local users group.
Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
"KD" <KD@discussions.microsoft.com> wrote in message
news:B4F7E7E5-DCD6-4474-9D11-DE2691AEDAD4@microsoft.com...
- Posted by Bob Hollness on January 28th, 2005
Have you created a domain policy which modifies the members of the local
admins group? Or maybe a startup script for all computers?
--
Bob
--------------------------------------
I'll have a B please Bob.
"Doug Sherman [MVP]" <dsherman@nospam.tampabay.rr.com> wrote in message
news:e38rxzMBFHA.3528@tk2msftngp13.phx.gbl...
- Posted by KD on January 28th, 2005
We haven't created a domain policy that modifies the members of the local
admins group. What happens is if we take a user who is just a domain user,
put them into a group with has local admin permissions, have them logout and
back in they do, indeed receive the elevated privleges. The issue is when we
remove this user from the group and they log back in, they still have those
elevated permissions.
"Bob Hollness" wrote:
