- icacls c:\ /remove "users" from elevated prompt (although UAC is disabled) gives access denied - psexec -s icacls c:\ /remove "users" gives access denied (so running as SYSTEM) - Modifying permissions through GPO, either local or through domain doesn't work, permissions aren't applied (probably also access denied)
Score users are more powerful than test takers, because users are in a position to mandate that test takers submit to the test. I don't get the bold part, that's why I don't understand the meaning of "test users".
Used to be that if I browsed to C:\Users, I saw my user folder along with Public, etc. But now, I not longer see my user folder or All Users unless I unhide "Protected operating system files".
trying to edit the virtual desktop collection deployment allowed me only to change the location of the users profiles disks but the location of the virtual desktops was grayed out so I can not modify it. so I did change the location of the users profiles and copied the *.vhd profile files, but for the virtual desktops I used the Failover-Cluster manager and I did Move ->Virtual Machine Storage.
How do I grant all the power users on our Server 2003 network the ability to install and remove programs as well as use of the system configuration utility (= run-> ms config)? They need these local rights on their workstations (XP and Vista). Either by using a "NET LOCALGROUP" startup script or with Restricted Groups in Group Policy.
If I invoke the mmc and look at all the users, under "Active Directory Users & Computers - Server - Users - Domain Users I see the following as "Server/Users" (not myBusiness/users):
The member attribute of Domain Users is often empty. Instead, the primaryGroupID attribute of the user (or computer) indicates the "primary" group. The value of primaryGroupID is the RID of the primary group. That's why you don't need to worry about how many members are in the Domain Users group.