Domain policies
I amnot sure where to put this question, but it is about servers so general seems a good place.My Issueis with windows Vista in a domain setting. I make GPO changes to get rid of the UAC popups (annoying little buggers they are) and all seems togo ok. Programs are installed correctly, users are happy and life is good.But, a program that needs admin rights to run will still not run, even with the correct GPO settings. (well, what I haveread and believe are the correct GPO settings.)Also, users cannot alter folders and files on shared drives. I have a common drivethat all people have full control over, yet some users are not able tomoveand/or delete folders they create. And, this is minutes after creating the folders.To me, this is all one issue, going down to permissions. Users having issues are on Vista Business computers joined to the domain. I dont see the problem on Windows XP computers as much, but those users dont try as much either. If anyone has suggestions on how to get the GPO setup correctly so I dont have to re-shut UAC off,I would appreciate it.thanks.Scotty
September 23rd, 2008 6:40pm
Hi,
<Also, users cannot alter folders and files on shared drives. I have a common drivethat all people have full control over, yet some users are not able tomoveand/or delete folders they create. And, this is minutes after creating the folders.>
This does not seem like UAC related issue. I suspect this appears to be related to permission issue. If you explicitly grant Full control permission on these folders they create to these users, dose the same problem still persist?
If possible, you can grant full control permission to Everyone, what is the result?
<If anyone has suggestions on how to get the GPO setup correctly so I dont have to re-shut UAC off,I would appreciate it.>
You can test the following group policy "Always install with Elevated Privileges" and Enable user to use media source while elevated. With using these GPs, OS uses system permissions to installs any program on the system.
Run Group Policy Edit:
1. Start, Run, GPEDIT.MSC
2. Expand the tree on the left to see Computer Configuration\Administrative Templates\Windows Components\Windows Installer
3. Double-click "Always install with Elevated Privileges"; choose Enable, OK
4. Double-click "Enable user to use media source while elevated"; choose Enable, OK
However, please understand that this group policy only takes effect for software installation based on Windows Installer. For applications that are based on other installation technology, such as InstallShield, it does not take effect.
Free Windows Admin Tool Kit Click here and download it now
September 26th, 2008 11:26am


