server 2003 Permissions

graptemys · 07-10-2008, 12:55 PM

Hi,
I am a little new to the Server 2003 world and need some help with permissions. I set up a Dell Server with Server 2003 OS. I have about 10 workstations which are a mixture of XP Pro and Vista Business OS installed on them. I successfully installed the users and computers using the CAL licenses. I have a shared folder on the server that everyone saves their data to. Each user can access this folder by a mapped shortcut.

How do I allow each user to update there own machine. When Java sends updates or Adobe sends updates, the user cannot just click on them to install. It is always asking for my administrator password. I want each user to be able to update their own windows updates, Java, Itunes, and whatever else without always needing to get my admin password.

Second, the clocks on these workstations are going crazy. As soon as someone logs onto the server with one of these workstations, their clock shows some obscure time that , of course, they can't change because they do not have permissions. The clock on the server is correct but everybody else seems to be about 2-4 hours off.

**Cellus** · 07-11-2008, 09:55 PM

Installing/updating software can and will require Administrator privileges. Infact some programs explicitly state they need it.

When it comes to Windows Updates, use WSUS. That's what it is there for.

As for workstations, make sure NTP (Network Time Protocol) is enabled, and that the time is set to automatically synchronize online.

djaburg · 07-12-2008, 05:03 PM

The answer to the running their own updates on the machine, if that's REALLY what you want to do, is to add the domain user to the local administrator group. Log in to the computer as administrator, then go to CONTROL PANEL>ADMINISTRATIVE TOOLS>COMPUTER MANAGEMENT>LOCAL USERS AND GROUPS>GROUPS, double click on ADMINISTRATORS>ADD and then enter the username that you'd like to add from the domain. Once it's there, that user will be able to do JUST ABOUT ANYTHING they want on that computer, including silly things like changing configuration settings on that local machine.

Upaco · 07-16-2008, 12:12 AM

For the installation you could make a gpo with
Administrative Templates / Windows components/Windows installer
Always install with elevated privileges for both user and computer configuration, that should help.

As for setting the time you could make a script also added thru gpo with
"net time \\pdcservername /SET /YES" to set the clock everytime they logon

07-10-2008, 12:55 PM	#1 (permalink)
graptemys Registered User Join Date: Jul 2008 Posts: 4 OS: Server 2003	server 2003 Permissions Hi, I am a little new to the Server 2003 world and need some help with permissions. I set up a Dell Server with Server 2003 OS. I have about 10 workstations which are a mixture of XP Pro and Vista Business OS installed on them. I successfully installed the users and computers using the CAL licenses. I have a shared folder on the server that everyone saves their data to. Each user can access this folder by a mapped shortcut. How do I allow each user to update there own machine. When Java sends updates or Adobe sends updates, the user cannot just click on them to install. It is always asking for my administrator password. I want each user to be able to update their own windows updates, Java, Itunes, and whatever else without always needing to get my admin password. Second, the clocks on these workstations are going crazy. As soon as someone logs onto the server with one of these workstations, their clock shows some obscure time that , of course, they can't change because they do not have permissions. The clock on the server is correct but everybody else seems to be about 2-4 hours off. Last edited by graptemys : 07-10-2008 at 12:59 PM.

07-11-2008, 09:55 PM	#2 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Re: server 2003 Permissions Installing/updating software can and will require Administrator privileges. Infact some programs explicitly state they need it. When it comes to Windows Updates, use WSUS. That's what it is there for. As for workstations, make sure NTP (Network Time Protocol) is enabled, and that the time is set to automatically synchronize online. __________________ TSF Networking Team HijackThis 5 Step Process Donate!

07-12-2008, 05:03 PM	#3 (permalink)
djaburg Registered User Join Date: May 2008 Posts: 332 OS: XP SP2	Re: server 2003 Permissions The answer to the running their own updates on the machine, if that's REALLY what you want to do, is to add the domain user to the local administrator group. Log in to the computer as administrator, then go to CONTROL PANEL>ADMINISTRATIVE TOOLS>COMPUTER MANAGEMENT>LOCAL USERS AND GROUPS>GROUPS, double click on ADMINISTRATORS>ADD and then enter the username that you'd like to add from the domain. Once it's there, that user will be able to do JUST ABOUT ANYTHING they want on that computer, including silly things like changing configuration settings on that local machine. __________________ Computers make it easier to do a lot of things, but most of the things they make it easier to do don't need to be done. Andy Rooney

07-16-2008, 12:12 AM	#4 (permalink)
Upaco Registered User Join Date: Jul 2008 Posts: 2 OS: XP sp3	Re: server 2003 Permissions For the installation you could make a gpo with Administrative Templates / Windows components/Windows installer Always install with elevated privileges for both user and computer configuration, that should help. As for setting the time you could make a script also added thru gpo with "net time \\pdcservername /SET /YES" to set the clock everytime they logon