accounts in two groups - Administrators and Power Users - who wins

Does one group take precedence over the other. I had a situation where the
user's accoutn was in both groups but when trying to install software, it
appeared as if he did not have enough privileges. One of my technicians
signed in as administrator and was able to install the software without a
problem. When he signed in as the user who was in both Power Users and
Admins, he said the install did not work.

So the general question is how does Windows decide how to apply group
membership roles.

MCSEGURU
Mon Sep 19 19:09:50 CDT 2005

The only reason I can think of that would have created that situation is if
there was a specific Deny permission on Power Users either in the local
security policy, or on the NTFS disk he was trying to install on.


"BookerW" <BookerW@discussions.microsoft.com> wrote in message
news:F9708400-380E-42EA-8B86-436675DC82D1@microsoft.com...
> Does one group take precedence over the other. I had a situation where
> the
> user's accoutn was in both groups but when trying to install software, it
> appeared as if he did not have enough privileges. One of my technicians
> signed in as administrator and was able to install the software without a
> problem. When he signed in as the user who was in both Power Users and
> Admins, he said the install did not work.
>
> So the general question is how does Windows decide how to apply group
> membership roles.
>

IWSEC
Wed Sep 21 05:32:01 CDT 2005

Hi,
Windows security adds all the permissions you assign a user together and
he has the grand total so to speak, except when a Deny is assigned in which
case it takes precedence over all other permissions. The reason for this is
that Windows when checking your permissions looks for Denies first, then
everything else second. If there is a Deny it doen't look any further.

Cheers
IWSEC
www.iwsec.co.uk


"BookerW" wrote:

> Does one group take precedence over the other. I had a situation where the
> user's accoutn was in both groups but when trying to install software, it
> appeared as if he did not have enough privileges. One of my technicians
> signed in as administrator and was able to install the software without a
> problem. When he signed in as the user who was in both Power Users and
> Admins, he said the install did not work.
>
> So the general question is how does Windows decide how to apply group
> membership roles.
>