|
Posted by Steven L Umbach on July 5, 2005, 5:28 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Not via a logon script for any user other than a local administrator who
already has most user rights. You could use Group Policy in a GPO linked to
an OU that contains the computer that you want the user to have the user
right on, use a Group Policy "startup" script that uses secedit to
import/configure the computer with a security template that has the user
rights defined that you want, or use a "startup" script that uses the
command ntrights to grant the user/group the user rights that you want them
to have on said computer or computers.
I am a bit confused as your post states user permissions and the body of the
post states user privileges which are two entirely different items.
Privileges are what a user can do on a computer such as logon locally or
change system time while permissions are access control lists to resources
such as ntfs permissions to a folder. Permissions can also be managed via
Group Policy/computer configuration/Windows settings/security settings -
file system and scripts. For scripts you can use a startup script or a logon
script using cacls or such. For a logon script the user would need to have
allow change permissions or ownership of the folder/file you want to change
permissions on.--- Steve
http://support.microsoft.com/default.aspx?scid=kb;en-us;266280 --- works
for Windows 2000/2003 also.
> Is it possible to set user privledges on a windows 2000\XP machine via a
> domain login script?
| 
XML site map