I am having a problem with a machine that we just got done rebuilding. I
rejoined the domain and everything went fine. Then I logged in as the user
into the domain, but I can't install anything. There is a user on the local
machine the same as what he is logging in as, but everytime I try to install
something it gets and error saying I don't have privledge. Any ideas? Is
there a setup of setup to setting up a user that can install stuff on the
machine while logged into the domain. I need to have this running by this
afternoon. Thanks for the help anyone.

Re: user can install anything by Merv

Merv
Fri Nov 12 15:06:34 CST 2004

I'm assuming this is Win XP Pro... Go into Control Panel | Administrative
Tools | Computer Management | Local Users and Groups | Groups |
Administrators and add the "domain user's" account to this local
administrator list. Make sure it's the domain user in question and not the
local user account that gets added to the list. If you click on ADD and
then LOCATION, you can select the domain instead of the local machine. Then
you can locate and add the domain user's account.

--
Merv Porter [SBS MVP]
===================================

"rick" <rick@discussions.microsoft.com> wrote in message
news:F1963C1C-F695-4113-A364-BBA1DC5A03AE@microsoft.com...
> I am having a problem with a machine that we just got done rebuilding.
I
> rejoined the domain and everything went fine. Then I logged in as the
user
> into the domain, but I can't install anything. There is a user on the
local
> machine the same as what he is logging in as, but everytime I try to
install
> something it gets and error saying I don't have privledge. Any ideas? Is
> there a setup of setup to setting up a user that can install stuff on the
> machine while logged into the domain. I need to have this running by this
> afternoon. Thanks for the help anyone.



Re: user can install anything by rick

rick
Fri Nov 12 15:34:04 CST 2004

This is with windows 2000, I am sorry I failed to mention that before.
Should I still go about this the same way. Thanks for the help. It is
greatly appreciated.


"Merv Porter [SBS-MVP]" wrote:

> I'm assuming this is Win XP Pro... Go into Control Panel | Administrative
> Tools | Computer Management | Local Users and Groups | Groups |
> Administrators and add the "domain user's" account to this local
> administrator list. Make sure it's the domain user in question and not the
> local user account that gets added to the list. If you click on ADD and
> then LOCATION, you can select the domain instead of the local machine. Then
> you can locate and add the domain user's account.
>
> --
> Merv Porter [SBS MVP]
> ===================================
>
> "rick" <rick@discussions.microsoft.com> wrote in message
> news:F1963C1C-F695-4113-A364-BBA1DC5A03AE@microsoft.com...
> > I am having a problem with a machine that we just got done rebuilding.
> I
> > rejoined the domain and everything went fine. Then I logged in as the
> user
> > into the domain, but I can't install anything. There is a user on the
> local
> > machine the same as what he is logging in as, but everytime I try to
> install
> > something it gets and error saying I don't have privledge. Any ideas? Is
> > there a setup of setup to setting up a user that can install stuff on the
> > machine while logged into the domain. I need to have this running by this
> > afternoon. Thanks for the help anyone.
>
>
>

Re: user can install anything by Merv

Merv
Fri Nov 12 15:49:05 CST 2004

Yep. Win2K and WinXP aren't that much different in this respect.

--
Merv Porter [SBS MVP]
===================================
"rick" <rick@discussions.microsoft.com> wrote in message
news:3D29B332-E68D-48D4-A863-77EBCBD65470@microsoft.com...
> This is with windows 2000, I am sorry I failed to mention that before.
> Should I still go about this the same way. Thanks for the help. It is
> greatly appreciated.
>
>
> "Merv Porter [SBS-MVP]" wrote:
>
> > I'm assuming this is Win XP Pro... Go into Control Panel |
Administrative
> > Tools | Computer Management | Local Users and Groups | Groups |
> > Administrators and add the "domain user's" account to this local
> > administrator list. Make sure it's the domain user in question and not
the
> > local user account that gets added to the list. If you click on ADD and
> > then LOCATION, you can select the domain instead of the local machine.
Then
> > you can locate and add the domain user's account.
> >
> > --
> > Merv Porter [SBS MVP]
> > ===================================
> >
> > "rick" <rick@discussions.microsoft.com> wrote in message
> > news:F1963C1C-F695-4113-A364-BBA1DC5A03AE@microsoft.com...
> > > I am having a problem with a machine that we just got done
rebuilding.
> > I
> > > rejoined the domain and everything went fine. Then I logged in as the
> > user
> > > into the domain, but I can't install anything. There is a user on the
> > local
> > > machine the same as what he is logging in as, but everytime I try to
> > install
> > > something it gets and error saying I don't have privledge. Any ideas?
Is
> > > there a setup of setup to setting up a user that can install stuff on
the
> > > machine while logged into the domain. I need to have this running by
this
> > > afternoon. Thanks for the help anyone.
> >
> >
> >



Re: user can install anything by rick

rick
Fri Nov 12 17:42:01 CST 2004

That was it, thank so much for your help. I guess I have one last question,
can you recommend any books I can read about things like this. I have read
sbs books and windows 2000 and 2003 books but none of them said anything
about adding the domain user. Thanks for your help again.

"Merv Porter [SBS-MVP]" wrote:

> Yep. Win2K and WinXP aren't that much different in this respect.
>
> --
> Merv Porter [SBS MVP]
> ===================================
> "rick" <rick@discussions.microsoft.com> wrote in message
> news:3D29B332-E68D-48D4-A863-77EBCBD65470@microsoft.com...
> > This is with windows 2000, I am sorry I failed to mention that before.
> > Should I still go about this the same way. Thanks for the help. It is
> > greatly appreciated.
> >
> >
> > "Merv Porter [SBS-MVP]" wrote:
> >
> > > I'm assuming this is Win XP Pro... Go into Control Panel |
> Administrative
> > > Tools | Computer Management | Local Users and Groups | Groups |
> > > Administrators and add the "domain user's" account to this local
> > > administrator list. Make sure it's the domain user in question and not
> the
> > > local user account that gets added to the list. If you click on ADD and
> > > then LOCATION, you can select the domain instead of the local machine.
> Then
> > > you can locate and add the domain user's account.
> > >
> > > --
> > > Merv Porter [SBS MVP]
> > > ===================================
> > >
> > > "rick" <rick@discussions.microsoft.com> wrote in message
> > > news:F1963C1C-F695-4113-A364-BBA1DC5A03AE@microsoft.com...
> > > > I am having a problem with a machine that we just got done
> rebuilding.
> > > I
> > > > rejoined the domain and everything went fine. Then I logged in as the
> > > user
> > > > into the domain, but I can't install anything. There is a user on the
> > > local
> > > > machine the same as what he is logging in as, but everytime I try to
> > > install
> > > > something it gets and error saying I don't have privledge. Any ideas?
> Is
> > > > there a setup of setup to setting up a user that can install stuff on
> the
> > > > machine while logged into the domain. I need to have this running by
> this
> > > > afternoon. Thanks for the help anyone.
> > >
> > >
> > >
>
>
>

Re: user can install anything by Merv

Merv
Fri Nov 12 18:17:51 CST 2004

Hi Rick,

If you've got the SBS books, it should be covered somewhere (maybe something
like the following).

Deploying Microsoft Office XP on Small Business Server 2000
http://www.microsoft.com/technet/prodtechnol/sbs/2000/deploy/dployofc.mspx
Computers Running Windows 2000 Professional and Windows XP Professional
"To install Office XP, you need administrative permissions on desktops for
client computers. By default, the domain administrator and users that were
assigned to client computers (during the Client Setup Wizard) are given
local administrative permissions on the client computer."

If you didn't use the client setup wizard to set up your clients on the
workstation(s), they probably weren't added to the local administrator's
group. Without this, users are "limited users" on Win2K and WinXP
workstations, meaning they won't be able to install most software. Win9x
machines don't really have much security, so the users can do virtually
anything they want with the machine(s). :-(

--
Merv Porter [SBS MVP]
===================================

"rick" <rick@discussions.microsoft.com> wrote in message
news:801947E3-7864-4D7E-9CE9-E6F902A325AC@microsoft.com...
> That was it, thank so much for your help. I guess I have one last
question,
> can you recommend any books I can read about things like this. I have
read
> sbs books and windows 2000 and 2003 books but none of them said anything
> about adding the domain user. Thanks for your help again.
>
> "Merv Porter [SBS-MVP]" wrote:
>
> > Yep. Win2K and WinXP aren't that much different in this respect.
> >
> > --
> > Merv Porter [SBS MVP]
> > ===================================
> > "rick" <rick@discussions.microsoft.com> wrote in message
> > news:3D29B332-E68D-48D4-A863-77EBCBD65470@microsoft.com...
> > > This is with windows 2000, I am sorry I failed to mention that
before.
> > > Should I still go about this the same way. Thanks for the help. It
is
> > > greatly appreciated.
> > >
> > >
> > > "Merv Porter [SBS-MVP]" wrote:
> > >
> > > > I'm assuming this is Win XP Pro... Go into Control Panel |
> > Administrative
> > > > Tools | Computer Management | Local Users and Groups | Groups |
> > > > Administrators and add the "domain user's" account to this local
> > > > administrator list. Make sure it's the domain user in question and
not
> > the
> > > > local user account that gets added to the list. If you click on ADD
and
> > > > then LOCATION, you can select the domain instead of the local
machine.
> > Then
> > > > you can locate and add the domain user's account.
> > > >
> > > > --
> > > > Merv Porter [SBS MVP]
> > > > ===================================
> > > >
> > > > "rick" <rick@discussions.microsoft.com> wrote in message
> > > > news:F1963C1C-F695-4113-A364-BBA1DC5A03AE@microsoft.com...
> > > > > I am having a problem with a machine that we just got done
> > rebuilding.
> > > > I
> > > > > rejoined the domain and everything went fine. Then I logged in as
the
> > > > user
> > > > > into the domain, but I can't install anything. There is a user on
the
> > > > local
> > > > > machine the same as what he is logging in as, but everytime I try
to
> > > > install
> > > > > something it gets and error saying I don't have privledge. Any
ideas?
> > Is
> > > > > there a setup of setup to setting up a user that can install stuff
on
> > the
> > > > > machine while logged into the domain. I need to have this running
by
> > this
> > > > > afternoon. Thanks for the help anyone.
> > > >
> > > >
> > > >
> >
> >
> >



Re: user can install anything by Lanwench

Lanwench
Sat Nov 13 17:11:28 CST 2004

rick wrote:
> I am having a problem with a machine that we just got done
> rebuilding. I rejoined the domain and everything went fine. Then I
> logged in as the user into the domain, but I can't install anything.
> There is a user on the local machine the same as what he is logging
> in as, but everytime I try to install something it gets and error
> saying I don't have privledge. Any ideas? Is there a setup of setup
> to setting up a user that can install stuff on the machine while
> logged into the domain. I need to have this running by this
> afternoon. Thanks for the help anyone.

In addition to the other replies, note that this is generally very
ill-advised. Users should not have local admin rights or install software -
that's the admin's job. Very Bad Things can happen when users have more
rights than they really need - too many to enumerate here.