[windows2000] Re: windows2000 Digest V3 #140

  • From: Daniel Ensor <densor@xxxxxxxxx>
  • To: "'windows2000@xxxxxxxxxxxxx'" <windows2000@xxxxxxxxxxxxx>
  • Date: Wed, 24 Mar 2004 17:03:30 -0000

Couldn't agree more Chris. 

We have a legacy app built for NT and when I arrived the solution which had
to be adhered to was the same: needed to be Local admins (on a NT4 TSE,
MF1.8!!) so the users had the ability to shutdown the server! (No reg
hacking had been done) Now we're running on 2k and MF XP FR3 and the app is
fine, I just had to find the keys as you suggest and then it was a doddle.
They're now all happy users the way they should be :)

Cheers
Dan


-----Original Message-----
From: Chris Berry
[mailto:chris_berry-list-windows2000@xxxxxxxxxxxxxxxxx]
Sent: 24 March 2004 16:54
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: windows2000 Digest V3 #140


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Anthony Abraham wrote:

| We have some apps that don't run without Local Admin rights (supposedly)..
| Not ideal but thats how it was when  I got here so instead of removing
this
| and downgrading them to Power User and potentially causing issues, I
want to
| use Group Policy to remove some security concerns...

Personally I'd have to say even power users is way too much.  The best
way is to use the tools at www.sysinternals.com to determine the exact
permissions, but giving domain users write permission to Program Files
and WINNT + Full control of HKLM\Software will handle 95% of all issues,
with far less security risk.

- --
Chris Berry
chris_berry@xxxxxxxxxxxxxxxxx
Systems Administrator
JM Associates & Coast Business Service

"He who laughs last probably made a back-up." --Murphy's Seventh law of
computing
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFAYb00kAS13ByzgbsRAh9NAKCixYVaYWV24N2jQly/OL6OjgtLDACgu13R
3r/TNI99lm7p83qTNTxoVgo=
=NEIg
-----END PGP SIGNATURE-----
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm
Visit the new FDL web - site designed to serve you better-
http://www.fdl.co.uk This message has been sent from Fuerst Day Lawson Ltd
and confirms that the email has been scanned and to the best of our
knowledge is free from virus infection. The unauthorised use, disclosure,
forwarding or copying of this message and any attachments is strictly
prohibited. If you have received this message in error, please email
moderator@xxxxxxxxx This message and any attachments, which are confidential
and may be privileged, are for the use of the addressee(s) only. The views
and opinions expressed in this email message are the author's own and may
not reflect the views and opinions of Fuerst Day Lawson Ltd. 
********************************************************
This Weeks Sponsor StressedPuppy.com Games
Feeling stressed out? Check out our games to
relieve your stress.
http://www.StressedPuppy.com
********************************************************
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: