Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Server > profile with no administrator rights don't work anymore

Reply
Thread Tools Display Modes

profile with no administrator rights don't work anymore

 
 
MorandMor
Guest
Posts: n/a

 
      11-14-2005
we were using Novell Netware for a couple of years and for some convenient we
decide to give administrator right on local machine to everybody.

we were doing all the basic setting in the administrator profile and made
ghost file of the workstation, (Probably the source of the problem), we start
to copy the administrator profile to the user profile to accelerate all the
setting configuration.

when we did the migration to win2k3 server, we got a serious problem with
the right, to execute program and get back all the normal options on the
workstations, so to bypass the problem we put domain users in the
administrators group (that was a bad idea)

but now we need to reverse it and take off every administrator right on the
workstations for better control.


but we got a problem, if we remove administrator rights on pc's, nobody
can access their profiles with normal rights (can’t open Outlook anymore,
missing menu and option in the start menu etc…)

I’ll check for solution in the newsgroup, I found a lot of things about
restrict group (GPO)
But that’s good to give administrator right to the workstations for a
limited number of people.

How can I get back the basic right to make the profile work?

 
Reply With Quote
 
 
 
 
Darrell Gorter[MSFT]
Guest
Posts: n/a

 
      11-14-2005
Hello,
When you copied the profile over to the user profile, the profile contains
ACLS and pointers specific to the administrator profile.
As long as the users are admins they can access everything. If they are
not admins, they don't have the rights to use the files and folders or
links back to the administrator profile.
The best way to recreate the profiles normally instead of copying over them
with the adminstrators profile.
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<Thread-Topic: profile with no administrator rights don't work anymore
<thread-index: AcXpSmpz1NSuXZWNQd2v2ZyTiunWlA==
<X-WBNR-Posting-Host: 207.96.161.128
<From: =?Utf-8?B?TW9yYW5kTW9y?= <>
<Subject: profile with no administrator rights don't work anymore
<Date: Mon, 14 Nov 2005 10:37:07 -0800
<Lines: 28
<Message-ID: <7724D37D-09AE-4690-9E16->
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 8bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
<Newsgroups: microsoft.public.windows.server.general
<NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
<Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
<Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.general:81489
<X-Tomcat-NG: microsoft.public.windows.server.general
<
<we were using Novell Netware for a couple of years and for some convenient
we
<decide to give administrator right on local machine to everybody.
<
<we were doing all the basic setting in the administrator profile and made
<ghost file of the workstation, (Probably the source of the problem), we
start
<to copy the administrator profile to the user profile to accelerate all
the
<setting configuration.
<
<when we did the migration to win2k3 server, we got a serious problem with
<the right, to execute program and get back all the normal options on the
<workstations, so to bypass the problem we put domain users in the
<administrators group (that was a bad idea)
<
<but now we need to reverse it and take off every administrator right on
the
<workstations for better control.
<
<
<but we got a problem, if we remove administrator rights on pc's, nobody
<can access their profiles with normal rights (can’t open Outlook
anymore,
<missing menu and option in the start menu etc…)
<
<I’ll check for solution in the newsgroup, I found a lot of things about
<restrict group (GPO)
<But that’s good to give administrator right to the workstations for a
<limited number of people.
<
<How can I get back the basic right to make the profile work?
<
<

 
Reply With Quote
 
MorandMor
Guest
Posts: n/a

 
      11-15-2005
Hi Darrel,

is it possible to reset the acls and pointers using the registry or maybe
with a command line options or using a file in the user profile instead of
recreate the profile normally

Thanks

""Darrell Gorter[MSFT]"" wrote:

> Hello,
> When you copied the profile over to the user profile, the profile contains
> ACLS and pointers specific to the administrator profile.
> As long as the users are admins they can access everything. If they are
> not admins, they don't have the rights to use the files and folders or
> links back to the administrator profile.
> The best way to recreate the profiles normally instead of copying over them
> with the adminstrators profile.
> Thanks,
> Darrell Gorter[MSFT]
>
> This posting is provided "AS IS" with no warranties, and confers no rights
> --------------------
> <Thread-Topic: profile with no administrator rights don't work anymore
> <thread-index: AcXpSmpz1NSuXZWNQd2v2ZyTiunWlA==
> <X-WBNR-Posting-Host: 207.96.161.128
> <From: =?Utf-8?B?TW9yYW5kTW9y?= <>
> <Subject: profile with no administrator rights don't work anymore
> <Date: Mon, 14 Nov 2005 10:37:07 -0800
> <Lines: 28
> <Message-ID: <7724D37D-09AE-4690-9E16->
> <MIME-Version: 1.0
> <Content-Type: text/plain;
> < charset="Utf-8"
> <Content-Transfer-Encoding: 8bit
> <X-Newsreader: Microsoft CDO for Windows 2000
> <Content-Class: urn:content-classes:message
> <Importance: normal
> <Priority: normal
> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> <Newsgroups: microsoft.public.windows.server.general
> <NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> <Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
> <Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.general:81489
> <X-Tomcat-NG: microsoft.public.windows.server.general
> <
> <we were using Novell Netware for a couple of years and for some convenient
> we
> <decide to give administrator right on local machine to everybody.
> <
> <we were doing all the basic setting in the administrator profile and made
> <ghost file of the workstation, (Probably the source of the problem), we
> start
> <to copy the administrator profile to the user profile to accelerate all
> the
> <setting configuration.
> <
> <when we did the migration to win2k3 server, we got a serious problem with
> <the right, to execute program and get back all the normal options on the
> <workstations, so to bypass the problem we put domain users in the
> <administrators group (that was a bad idea)
> <
> <but now we need to reverse it and take off every administrator right on
> the
> <workstations for better control.
> <
> <
> <but we got a problem, if we remove administrator rights on pc's, nobody
> <can access their profiles with normal rights (can’t open Outlook
> anymore,
> <missing menu and option in the start menu etc…)
> <
> <I’ll check for solution in the newsgroup, I found a lot of things about
> <restrict group (GPO)
> <But that’s good to give administrator right to the workstations for a
> <limited number of people.
> <
> <How can I get back the basic right to make the profile work?
> <
> <
>
>

 
Reply With Quote
 
Darrell Gorter[MSFT]
Guest
Posts: n/a

 
      11-15-2005
Hello,
It probably is if you want to spend the time locating all the references to
the wrong profile in the registry and in shortcuts that point back the
wrong profile.
So this is dependant on the profile, what it contains and what applications
are installed. It is different for everyone.
There are tools to change the ACLS in the filesytem and registry, that you
could run as well.
Thanks,
Darrell Gorter[MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights
--------------------
<Thread-Topic: profile with no administrator rights don't work anymore
<thread-index: AcXqAWquBtdIUKr0Q6ql96H6/PzG/w==
<X-WBNR-Posting-Host: 207.96.161.128
<From: =?Utf-8?B?TW9yYW5kTW9y?= <>
<References: <7724D37D-09AE-4690-9E16->
<6$>
<Subject: RE: profile with no administrator rights don't work anymore
<Date: Tue, 15 Nov 2005 08:27:05 -0800
<Lines: 82
<Message-ID: <8A63A511-386F-4EEA-AB58->
<MIME-Version: 1.0
<Content-Type: text/plain;
< charset="Utf-8"
<Content-Transfer-Encoding: 8bit
<X-Newsreader: Microsoft CDO for Windows 2000
<Content-Class: urn:content-classes:message
<Importance: normal
<Priority: normal
<X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
<Newsgroups: microsoft.public.windows.server.general
<NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
<Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
<Xref: TK2MSFTNGXA02.phx.gbl microsoft.public.windows.server.general:81560
<X-Tomcat-NG: microsoft.public.windows.server.general
<
<Hi Darrel,
<
<is it possible to reset the acls and pointers using the registry or maybe
<with a command line options or using a file in the user profile instead of
<recreate the profile normally
<
<Thanks
<
<""Darrell Gorter[MSFT]"" wrote:
<
<> Hello,
<> When you copied the profile over to the user profile, the profile
contains
<> ACLS and pointers specific to the administrator profile.
<> As long as the users are admins they can access everything. If they are
<> not admins, they don't have the rights to use the files and folders or
<> links back to the administrator profile.
<> The best way to recreate the profiles normally instead of copying over
them
<> with the adminstrators profile.
<> Thanks,
<> Darrell Gorter[MSFT]
<>
<> This posting is provided "AS IS" with no warranties, and confers no
rights
<> --------------------
<> <Thread-Topic: profile with no administrator rights don't work anymore
<> <thread-index: AcXpSmpz1NSuXZWNQd2v2ZyTiunWlA==
<> <X-WBNR-Posting-Host: 207.96.161.128
<> <From: =?Utf-8?B?TW9yYW5kTW9y?= <>
<> <Subject: profile with no administrator rights don't work anymore
<> <Date: Mon, 14 Nov 2005 10:37:07 -0800
<> <Lines: 28
<> <Message-ID: <7724D37D-09AE-4690-9E16->
<> <MIME-Version: 1.0
<> <Content-Type: text/plain;
<> < charset="Utf-8"
<> <Content-Transfer-Encoding: 8bit
<> <X-Newsreader: Microsoft CDO for Windows 2000
<> <Content-Class: urn:content-classes:message
<> <Importance: normal
<> <Priority: normal
<> <X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
<> <Newsgroups: microsoft.public.windows.server.general
<> <NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
<> <Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
<> <Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windows.server.general:81489
<> <X-Tomcat-NG: microsoft.public.windows.server.general
<> <
<> <we were using Novell Netware for a couple of years and for some
convenient
<> we
<> <decide to give administrator right on local machine to everybody.
<> <
<> <we were doing all the basic setting in the administrator profile and
made
<> <ghost file of the workstation, (Probably the source of the problem), we
<> start
<> <to copy the administrator profile to the user profile to accelerate all
<> the
<> <setting configuration.
<> <
<> <when we did the migration to win2k3 server, we got a serious problem
with
<> <the right, to execute program and get back all the normal options on
the
<> <workstations, so to bypass the problem we put domain users in the
<> <administrators group (that was a bad idea)
<> <
<> <but now we need to reverse it and take off every administrator right on
<> the
<> <workstations for better control.
<> <
<> <
<> <but we got a problem, if we remove administrator rights on pc's,
nobody
<> <can access their profiles with normal rights (can’t open Outlook
<> anymore,
<> <missing menu and option in the start menu etc…)
<> <
<> <I’ll check for solution in the newsgroup, I found a lot of
things about
<> <restrict group (GPO)
<> <But that’s good to give administrator right to the workstations
for a
<> <limited number of people.
<> <
<> <How can I get back the basic right to make the profile work?
<> <
<> <
<>
<>
<

 
Reply With Quote
 
 
 
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Possible to make user profile a roaming profile? Robert O'Connell Windows Server 0 10-11-2005 01:06 PM
Windows will not load roaming profile for user X Julian Windows Server 1 10-05-2005 02:01 AM
user profile problem hernia Windows Server 4 04-29-2005 01:46 PM
Another User Profile Problem michael Windows Server 2 09-16-2004 01:55 PM
Roaming Profiles with Folder Redirection Stuart Mackie [MCP, MSP] Windows Server 11 06-07-2004 08:49 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59