Group: microsoft.public.windowsxp.security_admin
From: "geek-y-guy"
Date: Thursday, February 21, 2008 11:00 AM
Subject: Re: xp pro, granting domain user access to local resources?

Thanks for the quick reply. This is an older Plustek scanner and I don't
expect the manufacturer will provide any updates for it. And yes, the
default user account locally has Admin rights, so you probably nailed it.

I don't have any issues granting the domain user admin rights on the
workstation, unless it opens up other vulnerabilities beyond them breaking
something .

Short of that, what would I need to manually edit to grant access? do you
mean granting the domain user appropriate access to specific folders they'd
normally not have access to?

Thanks again!

--

"Lanwench [MVP - Exchange]"
wrote in message
news:%23Y0QXjKdIHA.5416@TK2MSFTNGP04.phx.gbl...
> geek-y-guy wrote:
>> Hi All: I have an SBS2003 domain with a number of xppro sp2 clients.
>> All the computers are members of the domain, and I've set up domain
>> users for each computer.
>>
>> I have a USB scanner installed on one computer, and when a user logs
>> on to the local machine, they can access the scanner, but if they log
>> on using the domain account, they get an error when the scanner
>> application tries to load the (presumably) USB drivers for the
>> scanner.
>> It seems like a local security policy issue, but I can't figure out
>> what privileges the domain user needs to have the same access the
>> local account has?
>
> If the scanner is installed already, this is unlikely to be a driver
> issue. More likely, the software you're using is expecting the user to
> have administrative rights on the workstation in order to run the app.
>
> First, I'd contact the software developer and ask for a workaround which
> does *not* involve granting domain users admin rights - this is sloppy
> code, and they need to fix it.
>
> If you get nowhere with them, try downloading Process Monitor from
> Microsoft (a cool Sysinternals tool) that will help you find out what
> areas of the file system & registry the app expects to write to, so you
> can manually edit/correct it.
>


Safety Articles | Usenet Groups | Usenet News | Bluegrass