|
| | | New Member
Group: Forum Members
Last Login: 10/19/2005 5:22 PM
Posts: 3, Visits: 5 |
| | I just successfully installed my first Windows 2003 server a month ago. Unfortunately however, we have a number of older software that is having registry update issues. The legacy software runs fine when client is not logged onto the domain (signon to local computer only) or if a server admin logs in. When domain user logs in, the software fails. The software installed on the clients only (not the server). The clients (users) are set up as domain users. We already changed the client computers so that the client has full control of the client computers local directory. We did this by right clicking on the 'C' drive, selecting properties and security. We gave full control to domain user. This cleared up some of our software issues, but we still have registry update issues. I think we need to do something similar to regedit on the client to give domain user access to update the registry. We tried loading regedit, and right click hkey_local_machine, select permissions, and allow domain user full control of the registry. But this hung the computer. Am I going down the right track by updating permissions in regedit? Do I need to just go down deeper in the tree? Or is there a much simpler approach to all this with giving everything admin rights? |
| |
| | | Forum Moderator
Group: Moderators
Last Login: 8/13/2007 11:17 AM
Posts: 3,966, Visits: 1,057 |
| Try importing the compatws.inf security template into the local security policy of the affected clients.
__________________________________________________ 
|
| |
| | | New Member
Group: Forum Members
Last Login: 10/19/2005 5:22 PM
Posts: 3, Visits: 5 |
| | We figured it out. If a network admin tried to log on to the client, that client user would be running as a local admin, allowing that individual to access all local resources. If a non admin tried to log on, but that user was not set up as a domain user, then that user is basically given guest type access to local resources. We set up domain users on everyones workstation. One domain user per workstation. Does anyone know how to do this at the server level? Rather than logging into every computer individually and create a domain user, to create it somehow at the server. The previous suggestion indicated to use compatws. Is there a way to assign that to network users and allow compatws to have local admin rights? If the answer is yes, please point me to a good book or web article that discusses (in detail) how to make this work. Thanks. |
| |
|
|
