Location: List Archives

List Archives

This forum is an archive of all posts to our mailing list over the past few years.  The forum is set read only therefore to contribute you will need to join our list community.  See more info about this here.

List Archives

Subject: Re: [ActiveDir] OT: Local Admin Rights Question
Prev Next
You are not authorized to post a reply.

AuthorMessages
mck1012User is Offline

Posts:40

05/08/2008 4:21 PM  
Have you tried google, this was in the top 3 hits.



The user is logged into Windows with "user" privileges, Jinitiator is not installed, then logs into the Integrated System, selects a responsibility, clicks a task: it just sits there and nothing happens.
Solution: Log into Windows with Administrator privileges (or equivalent), then proceed to login to the Integrated System. After Jinitiator has been completely installed and is accessed, the user can then re-login to Windows with user privileges.




It is recommended to put the IS site in the Trusted Zone (click for directions).
Otherwise ...
Internet Explorer's ActiveX settings may prevent successful operation. To set this in Internet Explorer, first close all Windows applications. Then click on Tools, Internet Options, Security tab, Internet icon, Custom Level button. Set:
"Download signed ActiveX controls" to Enable or Prompt,
"Download UNsigned ActiveX controls" to Enable or Prompt,
"Run ActiveX controls and plugins" to Enable or Prompt.
Upon completion of the installation of Jinitiator, the security level for the Internet zone should be reset to the Default, which is Medium. On Internet Explorer menu bar, click Tools, Internet Options, Security tab, click Internet zone (the globe), Default Level button, Apply, OK.


----- Original Message ----
From: Anthony Kimmons <akimmons@mde.k12.ms.us>
To: ActiveDir@mail.activedir.org
Sent: Thursday, May 8, 2008 4:04:39 PM
Subject: [ActiveDir] Local Admin Rights Question

Hello Gurus,

I have a question concerning local administrator rights.

Here is my setup:

Server/Network
Server 2003 Active Directory, single domain controller, Exchange 2003
member server, (both fully patched as of April) small network with Cisco
6509 core, and all Cisco Wiring Closet switches.

Workstation
Gateway units with XP Pro, IE7, fully patched as of April, joined to
the domain.

No group Policies in effect (I am still a newbie and doing things the
hard way :).

We use a Web based software application that requires a java plug in
(jinitiator).

If I run the application logged in as the default local system
administrator, it works.

If I run the app logged in as a domain user, it won't work.

If I run the app logged in as a domain administrator, it won't work.

If I run the app logged in as a local administrator created on the
local machine with no domain rights, it won't work.

If I run the app as any other type user I can think of except the
default local administrator, then use the "run as" option and choose
the default local administrator, it won't work. (I have used this
option for a couple of other apps such as a web based mainframe
terminal emulation, and it did work. For this one, it will not.)

I do not want this secretary to run as a local admin for everything she
does.


Here is the question:

What rights does a default local administrator have that are missing
from a local user granted local machine administrator rights by adding
them to the "Machine Administrators Group"?

Can those rights be granted to a "created local administrator"? If so,
how?

Is there some way to grant "more rights" to the "run as option"?

Any guidance or pointing me in the right direction will be greatly
appreciated.

Anthony





Anthony Kimmons
Technology Coordinator

Mississippi School of the Arts
P O Box 229
Brookhaven, MS 39601

601-823-1354
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx



____________________________________________________________________________________
Be a better friend, newshound, and
know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ
You are not authorized to post a reply.
Forums >ActiveDir Mail List Archive >List Archives > Re: [ActiveDir] OT: Local Admin Rights Question



ActiveForums 3.7
AdventNet Banner
Friends

Friends

Namescape
Members

Members

MembershipMembership:
Latest New UserLatest:cthart
New TodayNew Today:1
New YesterdayNew Yesterday:4
User CountOverall:4285

People OnlinePeople Online:
VisitorsVisitors:85
MembersMembers:0
TotalTotal:85

Online NowOnline Now:

Ads

Copyright 2008 ActiveDir.org
Terms Of Use