Couldn't agree more Chris. We have a legacy app built for NT and when I arrived the solution which had to be adhered to was the same: needed to be Local admins (on a NT4 TSE, MF1.8!!) so the users had the ability to shutdown the server! (No reg hacking had been done) Now we're running on 2k and MF XP FR3 and the app is fine, I just had to find the keys as you suggest and then it was a doddle. They're now all happy users the way they should be :) Cheers Dan -----Original Message----- From: Chris Berry [mailto:chris_berry-list-windows2000@xxxxxxxxxxxxxxxxx] Sent: 24 March 2004 16:54 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: windows2000 Digest V3 #140 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Anthony Abraham wrote: | We have some apps that don't run without Local Admin rights (supposedly).. | Not ideal but thats how it was when I got here so instead of removing this | and downgrading them to Power User and potentially causing issues, I want to | use Group Policy to remove some security concerns... Personally I'd have to say even power users is way too much. The best way is to use the tools at www.sysinternals.com to determine the exact permissions, but giving domain users write permission to Program Files and WINNT + Full control of HKLM\Software will handle 95% of all issues, with far less security risk. - -- Chris Berry chris_berry@xxxxxxxxxxxxxxxxx Systems Administrator JM Associates & Coast Business Service "He who laughs last probably made a back-up." --Murphy's Seventh law of computing -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFAYb00kAS13ByzgbsRAh9NAKCixYVaYWV24N2jQly/OL6OjgtLDACgu13R 3r/TNI99lm7p83qTNTxoVgo= =NEIg -----END PGP SIGNATURE----- ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm Visit the new FDL web - site designed to serve you better- http://www.fdl.co.uk This message has been sent from Fuerst Day Lawson Ltd and confirms that the email has been scanned and to the best of our knowledge is free from virus infection. The unauthorised use, disclosure, forwarding or copying of this message and any attachments is strictly prohibited. If you have received this message in error, please email moderator@xxxxxxxxx This message and any attachments, which are confidential and may be privileged, are for the use of the addressee(s) only. The views and opinions expressed in this email message are the author's own and may not reflect the views and opinions of Fuerst Day Lawson Ltd. ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm