Topic: User permissions as per group?

[Cyrus Bharda]

Well I have taken the big step of turning off my windows 2000 server and replacing it with my SME 5.5u6.

Only problem is that I want my logon to have local administrator rights on my windows 2000 workstation, all the users are just normal users, howto I switch some to Power users and my sme logon to administrator so I get administrator rights on the local windows 2000 machine?

Thanks,

Cyrus Bharda

[Barry Fitzmaurice]

Can't you just create a new user on your Windows 2000 machine with the same name that you log into SME with and give that user admistrator rights?

[Abe Loveless]

You're using SME as the domain controller, right?  I struggled with the same problem.  I finally gave up on it, and created some custom login scripts to map my drives the way I wanted, and created my users on the various workstations (locally).

Works for a small office, but I'd rather use it the right way... if we could get it figured out.

[Derek]

If you're SME server is the domain controller and you've joined your W2000 workstation to the domain it is pretty straightforard. In the Local Users and Groups MMC panel on your W2000 machine, add your domain user as a member of the Administrators Group. It will be in the format DOMAIN\domain_user. If you logon to the domain from your W2000 machine as that user, you will have full local Administrator rights.

Now if someone can figure out how to do this with a Domain Group, I would be forever grateful. I have a machine that needs to have a domain group added to the local administrators group. Haven't been able to figure out how to do it, besides adding every individual domain user in the domain group to administrators. (Which completely defeats the purpose of having a group).

[Cyrus Bharda]

Derek,

I cannot seem to add the user SMEDOMAIN\user_name to the local users?

I have tried adding the user, but it says"SMEDOMAIN\user_name cannot be used, characters such as / \ are not allowed in the name."

So I just tried creating a local user and then add it to the SME's domain 's admin group, but when I goto add it in, there is a "Look in" pull down which I need to do to change to the domain, but it is greyed out?

Sorry to be such a noobie, but could you possible walk me through doing this please?

I have tried every way possible that I know how to do this and nothing works?

I am accessin Local Users and Groups by right clicking on My Computer and then clicking on Manage and then Local Users and Groups, is that the right place to edit these?

Thanks foryour help!!!

Cyrus Bharda

[Cyrus Bharda]

Barry Fitzmaurice wrote:
>
> Can't you just create a new user on your Windows 2000 machine
> with the same name that you log into SME with and give that
> user admistrator rights?

Barry,

No you cannot because you are adding that user to the local domain, not the sme domain, so when you logon, you are not loging onto the sme domain.

But it look like if you want to have the sme as the domain controller then all the users have absolutly no rights to do anything but run programs and save files.

This seems rather absurd which is why I am trying derek's advice to add my user  name to the local administrators group, but cannot get access to the user listing of the sme domain?

Anyway thanks for the help!

Cyrus Bharda

[Cyrus Bharda]

Abe Loveless wrote:
>
>
> You're using SME as the domain controller, right?  I
> struggled with the same problem.  I finally gave up on it,
> and created some custom login scripts to map my drives the
> way I wanted, and created my users on the various
> workstations (locally).
>
> Works for a small office, but I'd rather use it the right
> way... if we could get it figured out.

Abe,

It just seems so absurd that Mitel would allow the SME to be the domain controller, yet have absolutly no access to changing user rights?!?!

We must be missing something somewhere, I have read both the manuals and followed the instructions to the letter on how to get a windows 2000 workstation joined to the sme domain and that worked great, but there are no references I could find in the manuals or through a search of the forums, has no one had this problem? Which means no one is using the SME as the domain controller with windows 2000 workstations? I sincerly doubt it, someone has got to be doing this and found a way to change the user permissions, is there a way to do this on the SME, because if you changed the user group on the SME then that would flow down to the workstation when you logon, but again I do not know anything in this area!

If no one can come up with a solution I really think this is a bug, or an oversight in development, but yet again I sincerly doubt it!

Cyrus Bharda

[Cyrus Bharda]

Derek,

You were right!!! I was tring to add a user to the domain and not the other way around!!

Stupid me read your post wrongly, its all great now!!

Abe, follow Derek's post and everything works freaking beautiful!!

Thanks Derek, that just put the last nail in the coffin for my windows 2000 server box, its getting a format on the weekend

Thanks again!!!

Cyrus Bharda

[Derek]

Glad to help.