|
Posted by Steven L Umbach on January 5, 2006, 7:13 pm
Please log in for more thread options
I doubt it is a user rights issue but it may be an issue with permissions to
folders/file, group membership, or possibly Group Policy. If you want to
check user rights you can use the support tool whoami /all while the user is
logged on which will also show group membership for that logon session. You
can run Resultant Set of Policy mmc snapin for the users in question from
your domain controller and compare to a user that is not having a problem to
compare the results and in particular look at any entries for Software
Restriction Policies. Also have a user that is not having a problem try to
install on a computer where a user is having the problem to see if the
problem is somehow computer related instead of user related. If the user
with a problem is in any group that has deny permissions to a folder, etc
then that user will have problems even if they are a local administrator.
Also look in the logs on the computer via Event Viewer where the user is
having a problem for anything that may give a clue including cached logons
in the security log. If none of that seems to help you might try using
filemon/regmon from SysInternals while logged on as the user on their
computer to see if you can find any access denied entries in the log. Logon
as the user and then use runas and your admin credentials to start
filemon/regmon. --- Steve
http://www.sysinternals.com/Utilities/Filemon.html --- filemon and link to
SysInternals
> I'm having a strange problem.
> Win Server 2k3. All workstations XP. Single domain, AD.
> Most users in same OU, all with same rights. Except for me with admin
> rights.
> Want to install goldmine integration for outlook. works for 90% of users
> in
> said OU.
> remaining users will not allow it to install. all users have local admin
> rights to local workstation to ensure proper install. then removed. for
> some
> reason some users in this OU don't seem to have the same effective rights.
> anyway are there any tools to compare them, check them, force their rights
> back on them... ??
>
> Thanks for any help.
>
>
|