Manage Learn to apply best practices and optimize your operations.

Allow Windows network access, but not admin rights

How can you grant Windows network access without giving users administrator rights and posing a threat to Microsoft security?

How can I grant a user Windows network access without giving him administrator rights?
One of the common misconceptions when it comes to Windows network access is that users must be granted administrator rights. In most cases, that's not true. The easiest way to ensure that a user does not have administrator rights is to make sure that he is not a member of either the domain "Domain Admins" group or the local Administrators group -- and that he's not a member of any other group that is a member of those two. As long as you ensure the above, the user can access the network and network resources, but will not have administrator's rights.
This was last published in September 2007

Dig Deeper on User passwords and network permissions

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Please create a username to comment.