Domain Users, Local Permissions, and Outlook - Page 2 - Techist - Tech Forum

Go Back   Techist - Tech Forum > Computer Software > Microsoft Windows and Software
Click Here to Login
Closed Thread
 
Thread Tools Display Modes
 
Old 10-03-2005, 12:11 PM   #11 (permalink)
Newb Techie
 
Join Date: Sep 2005
Posts: 7
Default

"I was basically asking if your ACLS within your GPO have any reqs for Outlook at all. Or basically are there any rules you have set for outlook at all on the domain ?"

Nope. We are using MS Exchange, but I don't know if that is relevent.

We've only tested on one machine so far.
__________________

Matt-at-anw is offline  
Old 10-03-2005, 12:22 PM   #12 (permalink)
S e c u r e d
 
Join Date: Feb 2005
Location: Somewhere Sunny
Posts: 3,760
Default

Exchange is a given ... That doesn't really answer that question.
__________________

__________________
brady is offline  
Old 10-03-2005, 04:17 PM   #13 (permalink)
Master Techie
 
Join Date: Feb 2004
Posts: 2,172
Send a message via AIM to Win2kpatcher
Default Re: Domain Users, Local Permissions, and Outlook

Quote:
Originally posted by Matt-at-anw
Hi all,

Our network setup currently has users logging in as domain users, and they are all local administrators on their own computers. We wanted to restrict them to limited or power users, but when we did this on a computer, we got a message when trying to open Outlook 2003 that said "Cannot open Microsoft Office Outlook." Are we missing permissions somewhere? Is there a conflict problem with the domain settings? Anyone have any ideas?

Thanks,

Matt
Can you clarify..first you say you have them as local admins, but then you say they are limited or power users...which are they on the local machine.thanks.
Win2kpatcher is offline  
Old 10-03-2005, 04:26 PM   #14 (permalink)
Newb Techie
 
Join Date: Sep 2005
Posts: 7
Default Re: Re: Domain Users, Local Permissions, and Outlook

Quote:
Originally posted by Win2kpatcher
Can you clarify..first you say you have them as local admins, but then you say they are limited or power users...which are they on the local machine.thanks.
The other computers are currently configured as local administrators, and they work fine. The computer that is having issues is the one that we set as a power user.
Matt-at-anw is offline  
Old 10-03-2005, 04:33 PM   #15 (permalink)
Master Techie
 
Join Date: Feb 2004
Posts: 2,172
Send a message via AIM to Win2kpatcher
Default

that is probably it. set it to local admin and reboot and see if it fixes the problem. If it does then we can control his permission from the active directory level via a policy and block out the items you wanted to block out. You can PM me if you wish for details on how to do this or I can post here to that is fine.
Win2kpatcher is offline  
Old 10-03-2005, 04:39 PM   #16 (permalink)
Newb Techie
 
Join Date: Sep 2005
Posts: 7
Default

We use GPO to restrict most things. Is there an option in GPO to make domain users similar (in permissions) to restricted users? We don't want to allow downloads/installations due to the amount of virus problems we've had with the sales staff over here.

Thanks
Matt-at-anw is offline  
Old 10-04-2005, 12:57 AM   #17 (permalink)
Master Techie
 
Join Date: Feb 2004
Posts: 2,172
Send a message via AIM to Win2kpatcher
Default

Yes you can do this easily. If I was you I would create a seperate GPO and place this user in it. In the policy ( now if I recall the XP local policy and server 2003 policy are pretty similiar so these instructions should be close enough).

Go to USER CONFIGURATION>ADMINISTRATIVE TEMPLATES>INTERNET EXPLORER>INTERNET CONTROL PANEL>SECURITY PAGE>LOCKED-DOWN LOCAL MACHINE ZONE, then disable-allow file downloads. In the IE area you can also prevent SAVE-AS dialog boxes..prevent changing home pages..GPO rules!!
__________________

Win2kpatcher is offline  
Closed Thread

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off




Copyright 2002- Social Knowledge, LLC All Rights Reserved.

All times are GMT -5. The time now is 07:28 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2017, vBulletin Solutions, Inc.