Computing.Net > Forums > Windows Server 2003 > user permissions

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

user permissions

Reply to Message Icon

Name: bitsol
Date: September 13, 2004 at 13:16:07 Pacific
OS: server 2003
CPU/Ram: A2600
Comment:

I have a query about server 2003 as I'm a novice in this area.

I have just installed this product (as a replacement for NT4) in a school and on some occassions the teachers allow the students to play games as recreational time. Unfortunately when they try and play the games that were already installed on the workstations they get an error screen to say they don't have the correct permission and so far the only way to allow them to play the game is to log them on as the administrator. Obviously this could lead to severe problems and I'm not sure of the correct way round this. All the student are just logged on as normal users.

Can anyone help with the best method to allow any user on the workstation to play the game?????

Thanks in advance

Pete




Sponsored Link
Ads by Google

Response Number 1
Name: briantech
Date: September 13, 2004 at 17:33:43 Pacific
Reply:

You have them logon localy with admin rights, not into the domain. or give admin right on there desktops , put there local user account into the local admin group.. but don't have them logon as doamin admin..


0

Response Number 2
Name: Curt R
Date: September 14, 2004 at 05:20:23 Pacific
Reply:

I wouldn't do any of that. I would set the programs in question to run under the admin's account. That should allow the kids to play it without changing their group membership.


0

Response Number 3
Name: gubi
Date: September 14, 2004 at 06:41:35 Pacific
Reply:

never give kids ADMIN rights !!!! Create an account that will be used by the kids only and then go into the permissions of the program or file and give that account the proper permissions to play the games...that's the short way. The best way is to create Group Policies and your life will be alot easier.

Bh the playground legend


0

Response Number 4
Name: Arf
Date: September 14, 2004 at 07:09:26 Pacific
Reply:

Maybe you can try to find the rights they need to play games. Did you try to give they full control on games directories? Did you try to give them some more permissions in the local policies?
If I were you I would do something like this but do not give them administrator rights. If you find the permission they will be able to play games but not to install them.


0

Response Number 5
Name: bitsol
Date: September 15, 2004 at 03:26:40 Pacific
Reply:

Thanks for the replies

Curt R - the games already run if you log on ad asministrator but the kids (as normal users) keep getting error messages saying that they do not have permission or admin rights to run the program.

Thanks



0

Related Posts

See More



Response Number 6
Name: bitsol
Date: September 15, 2004 at 03:28:28 Pacific
Reply:

Thanks again

gubi - I want to do it the 'correct' way so could you explain how I would do it the group policy way

cheers


0

Response Number 7
Name: Curt R
Date: September 15, 2004 at 05:20:21 Pacific
Reply:

What I meant was....right click on the shortcut to the game and select "Run as" from the menu that comes up. There you can set the game to run under the administrator account (supply username and password) and then, whenever the kids with their user accounts go to run the game, it will run under the admin account....try it, it works. This doesn't give them admin rights, this just runs the game under the admin account whenvever anyone starts it.

NOTE: you'll have to be logged on as the administrator to set this feature.


0

Response Number 8
Name: briantech
Date: September 15, 2004 at 08:27:48 Pacific
Reply:

To be able to use GPO's you really need a server, the best way is to just add the local user in the local admin group on that machine


0

Response Number 9
Name: Curt R
Date: September 15, 2004 at 13:04:28 Pacific
Reply:

I just did some testing. On an XP PC, you can access the "run as" via the context sensitive menu (ie: right click on the shortcut to the game and select "run as"). 2000 Pro doesn't have this option available but if you check the 2000 help files and search the following string "run an application as the administrator" and click on the link that says "create a shortcut using the runas command parameters" you will find the info needed to do what I said in 2000 Pro as well.

You don't need GPO's, you don't need to add students to the administrator group...in fact, you don't need to change anything except the account the program runs under when it is invoked

The reason the kids can't run the games now is because the game is being run under their user accounts which have restrictions. If you force the games to run under the administrators account, it's the same as if you've given the kids membership in the administrator group (ie: no restrictions).....only my way, their group membership doesn't change and they therefore cannot make trouble and cause problems on the systems. The only thing that changes doing it my way is the game itself runs under a non-restricted account.....not the users.

Too simple, too sensible, too logical..........too right!
So just what part of this aren't you guys understanding????



0

Response Number 10
Name: briantech
Date: September 15, 2004 at 14:34:59 Pacific
Reply:

using secondy logon only works on exacutbles only, by giving them local admin rights to there pc , is not the same as giving them rights to to domain. there are certain folders that need the right permissions and the secondy logon will not do that.


0

Response Number 11
Name: briantech
Date: September 15, 2004 at 14:55:40 Pacific
Reply:

even if you do the secondy logon, you still need to provide the admin account info to get the game to run, and I not even sure there is a DC, he never talks about one.. It might be just a peer to peer network.


0

Response Number 12
Name: Curt R
Date: September 16, 2004 at 05:50:14 Pacific
Reply:

It does work in a domain, I've done it. The info (admin account name and password) is provided when you set the application to "runas" and is remembered and used automatically whenever the app is run thereafter. If you're doing it on the local PC, use the local admin account.


0

Response Number 13
Name: bitsol
Date: September 16, 2004 at 08:43:10 Pacific
Reply:

Hi Guys

Thanks for all your help

Just so everybody knows, it is a server 2003 server with XP PRO workstations running on a domain.

Curt R - this does indeed sound too simple!!
But I'll try it and just to recap....you don't have to put in the username and password everytime???

Thanks


0

Response Number 14
Name: Curt R
Date: September 17, 2004 at 05:16:13 Pacific
Reply:

No, once you've set the application to run under the Administrator Account it should remember this for future use.


0

Sponsored Link
Ads by Google
Reply to Message Icon






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows Server 2003 Forum Home


Sponsored links

Ads by Google


Results for: user permissions

user permissions on client pc's www.computing.net/answers/windows-2003/user-permissions-on-client-pcs/3041.html

Audit User Permissions www.computing.net/answers/windows-2003/audit-user-permissions/7969.html

User sets permissions? www.computing.net/answers/windows-2003/user-sets-permissions/4379.html