UNSOLVED
What do Builtin groups allow members to do?
Is there a listing anywhere of what users will be allowed to do if they are placed into the various Windows Local Groups on the Celerra (i.e. Administrators, Power Users, Backup Operators).
I wanted to be able to give our account creation team the rights to create home directories, which includes creating the share. I noticed that if I put them into Power Users, they could do it, but I wanted to know what else I would be granting them?
I wanted to be able to give our account creation team the rights to create home directories, which includes creating the share. I noticed that if I put them into Power Users, they could do it, but I wanted to know what else I would be granting them?
BillStein-Dell
Moderator
•
285 Posts
736
1
Posted January 14th, 2008 15:00
More specific information for you:
Local Administrators builtin group gets:
SeTakeOwnerShip | SeBackup | SeRestore | SeChangeNotify | SeAudit | SeIncreaseQuota | SeSecurity
Backup operator builtin group gets:
SeChangeNotify | SeBackup | SeRestore
All other builtin groups get:
SeChangeNotify (Bypass traverse checking privilege)
Descriptions of these can be found on TechNet. http://www.microsoft.com/technet/security/prodtech/windows2000/w2kccscg/w2kscgcc.mspx
BillStein-Dell
Moderator
•
285 Posts
736
1
Posted January 11th, 2008 14:00
Administrators: Members can fully administer the machine
Users: Ordinary users
Guests: Users granted guest access to the computer
Power Users: Members can share directories
Account Operators: Account operators of the machine
Backup Operators: Members can bypass file security to backup files
Replicator: Support file replication in a domain