Skip to Search

 
diagonal spacer

 

Permissions

Groups and Their Members

On every workstation, certain permissions groups need to have other groups as members. If there are any more or any less, then that workstation will be bounced off the network during a system sweep.

  1. Log onto the workstation (not smatherslib) as Administrator (not as yourself).
  2. Select Start | Settings | Control Panel | Users and Passwords [XP: User Accounts].
  3. Select the Advanced tab.
  4. Select the Advanced button.
  5. In the left pane, select the Groups folder.

Administrators

  1. Double click Administrators.
  2. Select the Add button.
  3. Select the Look in: drop down list and choose SMATHERSLIB.[XP: Select Advanced | Find]
  4. A dialog box may ask for a user name and password to log onto the network. If so, then enter the appropriate information.
  5. Select System Liaisons in the upper panel. (There seems to be more than one alphabetical series in this pull-down list. Keep looking.)
  6. Select Add. System liaisons should appear in the bottom panel.
  7. Administrators should now include:
    1. Adminstrator
    2. SMATHERSLIB\Domain Admin
    3. SMATHERSLIB\Systems Liaisons
  8. If not all these appear, then add whatever is necessary.
  9. If more than these appear, delete them. (Otherwise the network may bounce this workstation as a security risk.)
  10. Select OK and OK.

Per Bills instructions, I will be checking every machine on the Domain for un-authorised use of local Admin group usage. Any machine found with individual sign-ons in the local Administrators group will be removed from the Domain. Geoffrey, 2004-04-05.

Power Users

  1. Double click Power Users.
  2. Click the Add button.
  3. Select the Look in: drop down list and choose SMATHERSLIB.
  4. A dialog box may ask for a user name and password to log onto the network. If so, then enter the appropriate information.
  5. Select Real Users in the top panel. (There seems to be more than one alphabetical series in this pull-down list. Keep looking.)
  6. Click Add. Real Users should appear in the bottom panel.
  7. Click OK, OK, etc.

Adding Groups to Other Groups

Can't be done: global groups cannot be placed in other global groups. Bill C., 2005-01-06.

Instead, permissions must be defined per group per folder. For example, request that DLCScanTech and TextTech be given "Read & Execute" rights to Smathersnt19\Prdev\bin, its files and subfolders etc.

Checking Which Network Groups a User Is a Member Of

You can't:
You are correct that there is no way for a non-domain-admin to check these things. Winston H., 2004-10-04.

This means that you need to check these things through an email to syshelp.

 

University of Florida Home Page