Click here to get back home

effective user rights

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
effective user rights Yvan LeTourneau 01-05-2006
Posted by Yvan LeTourneau on January 5, 2006, 5:50 pm
Please log in for more thread options
I'm having a strange problem.
Win Server 2k3. All workstations XP. Single domain, AD.
Most users in same OU, all with same rights. Except for me with admin
rights.
Want to install goldmine integration for outlook. works for 90% of users in
said OU.
remaining users will not allow it to install. all users have local admin
rights to local workstation to ensure proper install. then removed. for some
reason some users in this OU don't seem to have the same effective rights.
anyway are there any tools to compare them, check them, force their rights
back on them... ??

Thanks for any help.



Posted by Steven L Umbach on January 5, 2006, 7:13 pm
Please log in for more thread options
I doubt it is a user rights issue but it may be an issue with permissions to
folders/file, group membership, or possibly Group Policy. If you want to
check user rights you can use the support tool whoami /all while the user is
logged on which will also show group membership for that logon session. You
can run Resultant Set of Policy mmc snapin for the users in question from
your domain controller and compare to a user that is not having a problem to
compare the results and in particular look at any entries for Software
Restriction Policies. Also have a user that is not having a problem try to
install on a computer where a user is having the problem to see if the
problem is somehow computer related instead of user related. If the user
with a problem is in any group that has deny permissions to a folder, etc
then that user will have problems even if they are a local administrator.

Also look in the logs on the computer via Event Viewer where the user is
having a problem for anything that may give a clue including cached logons
in the security log. If none of that seems to help you might try using
filemon/regmon from SysInternals while logged on as the user on their
computer to see if you can find any access denied entries in the log. Logon
as the user and then use runas and your admin credentials to start
filemon/regmon. --- Steve

http://www.sysinternals.com/Utilities/Filemon.html --- filemon and link to
SysInternals

> I'm having a strange problem.
> Win Server 2k3. All workstations XP. Single domain, AD.
> Most users in same OU, all with same rights. Except for me with admin
> rights.
> Want to install goldmine integration for outlook. works for 90% of users
> in
> said OU.
> remaining users will not allow it to install. all users have local admin
> rights to local workstation to ensure proper install. then removed. for
> some
> reason some users in this OU don't seem to have the same effective rights.
> anyway are there any tools to compare them, check them, force their rights
> back on them... ??
>
> Thanks for any help.
>
>



Similar ThreadsPosted
Pulling out users different EFFECTIVE access rights to folders? June 29, 2005, 5:15 am
How2: User Rights on Domain but Admin Rights on Computer December 20, 2006, 3:40 pm
user rights August 15, 2005, 10:13 am
User Rights not enough? October 4, 2006, 3:47 am
Discovering User Rights November 13, 2007, 12:15 pm
User Account and Rights questions January 28, 2006, 10:03 am
User Rights for IUSR_xxxx and ASPNET? December 26, 2006, 1:05 am
No Explicit Reference to SYSTEM in User Rights? July 2, 2006, 9:47 pm
Need limited domain admin rights user account. August 8, 2005, 2:33 pm
Printer installation & Group Policy / User Rights November 9, 2005, 8:33 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap