Prev: Backup Schedule for 2003 Domain Controllers
Next: Migrate CA from the W2003 DC to a W2008R2 DC
From: Adrian Marsh on 15 Apr 2010 08:58
Hi All,

Am having to venture now into starting to deploy Windows 7 Pro into our
AD (2003) environment. Current platform is all XP SP3/ Server 2003 based.

All of my users are set as local admins via group policy. And I need to
try and understand how that plays into UAC and Admin rights in Windows 7.

For example,

Using an existing 2003-AD Domained account, I can't see to install
applications without having UAC kick in and ask for elevation.
When I put in my normal-user account details, it fails and repeats. I
have to enter a domain-admin account login to get the software to install.

I don't really want to have to turn UAC off unless its essential, as I
do agree with it checking for certain things, but can't see how to tie
that back into the current infrastructure.

Any advice??

Thanks

Adrian
From: Meinolf Weber [MVP-DS] on 16 Apr 2010 05:43
Hello Adrian,

Check this one about:
http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hi All,
>
> Am having to venture now into starting to deploy Windows 7 Pro into
> our AD (2003) environment. Current platform is all XP SP3/ Server
> 2003 based.
>
> All of my users are set as local admins via group policy. And I need
> to try and understand how that plays into UAC and Admin rights in
> Windows 7.
>
> For example,
>
> Using an existing 2003-AD Domained account, I can't see to install
> applications without having UAC kick in and ask for elevation.
> When I put in my normal-user account details, it fails and repeats. I
> have to enter a domain-admin account login to get the software to
> install.
> I don't really want to have to turn UAC off unless its essential, as I
> do agree with it checking for certain things, but can't see how to tie
> that back into the current infrastructure.
>
> Any advice??
>
> Thanks
>
> Adrian
>


From: Adrian Marsh on 19 Apr 2010 07:19
Thanks Meinolf, I'll read that through.

On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
> Hello Adrian,
>
> Check this one about:
> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi All,
>>
>> Am having to venture now into starting to deploy Windows 7 Pro into
>> our AD (2003) environment. Current platform is all XP SP3/ Server
>> 2003 based.
>>
>> All of my users are set as local admins via group policy. And I need
>> to try and understand how that plays into UAC and Admin rights in
>> Windows 7.
>>
>> For example,
>>
>> Using an existing 2003-AD Domained account, I can't see to install
>> applications without having UAC kick in and ask for elevation.
>> When I put in my normal-user account details, it fails and repeats. I
>> have to enter a domain-admin account login to get the software to
>> install.
>> I don't really want to have to turn UAC off unless its essential, as I
>> do agree with it checking for certain things, but can't see how to tie
>> that back into the current infrastructure.
>>
>> Any advice??
>>
>> Thanks
>>
>> Adrian
>>
>
>
From: Adrian Marsh on 19 Apr 2010 07:52
Hi Meinolf,

As I read through that text, an old question of mine re-appears, that
you and Ace partially answered for me last year, which was, in summary,
"how to administer Windows Vista/Windows 7 GPOs".

You're advice I think, was to use RSAT on a Windows 7 client against a
2008 server.
However, I only have a Windows XP client myself, and am in a 2003-only
environment.

At this point, I seem to be able to use the XP 2003 GPO MMC to edit/view
some policy settings, but a lot appear as Extra registry Settings.

I know that Vista/7 switched to using .admx files, but can I edit/view
these from a XP/2003 station?

Thanks,

Adrian


On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
> Hello Adrian,
>
> Check this one about:
> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hi All,
>>
>> Am having to venture now into starting to deploy Windows 7 Pro into
>> our AD (2003) environment. Current platform is all XP SP3/ Server
>> 2003 based.
>>
>> All of my users are set as local admins via group policy. And I need
>> to try and understand how that plays into UAC and Admin rights in
>> Windows 7.
>>
>> For example,
>>
>> Using an existing 2003-AD Domained account, I can't see to install
>> applications without having UAC kick in and ask for elevation.
>> When I put in my normal-user account details, it fails and repeats. I
>> have to enter a domain-admin account login to get the software to
>> install.
>> I don't really want to have to turn UAC off unless its essential, as I
>> do agree with it checking for certain things, but can't see how to tie
>> that back into the current infrastructure.
>>
>> Any advice??
>>
>> Thanks
>>
>> Adrian
>>
>
>
From: Adrian Marsh on 19 Apr 2010 08:00
Ahh... I might of now found my answer:

http://support.microsoft.com/kb/929841 :

"Group Policy administration
Windows Vista does not include Administrative Templates that have an
..adm extension. Additionally, earlier versions of Windows cannot use the
new administrative format. Therefore, client computers that are running
earlier versions of Windows cannot administer new policies that are
included with Windows Vista. We recommend that you use computers that
are running Windows Vista or later versions of Windows to perform Group
Policy administration."

On 19/04/2010 12:52, Adrian Marsh wrote:
> Hi Meinolf,
>
> As I read through that text, an old question of mine re-appears, that
> you and Ace partially answered for me last year, which was, in summary,
> "how to administer Windows Vista/Windows 7 GPOs".
>
> You're advice I think, was to use RSAT on a Windows 7 client against a
> 2008 server.
> However, I only have a Windows XP client myself, and am in a 2003-only
> environment.
>
> At this point, I seem to be able to use the XP 2003 GPO MMC to edit/view
> some policy settings, but a lot appear as Extra registry Settings.
>
> I know that Vista/7 switched to using .admx files, but can I edit/view
> these from a XP/2003 station?
>
> Thanks,
>
> Adrian
>
>
> On 16/04/2010 10:43, Meinolf Weber [MVP-DS] wrote:
>> Hello Adrian,
>>
>> Check this one about:
>> http://technet.microsoft.com/en-us/library/cc709628(WS.10).aspx
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>
>>> Hi All,
>>>
>>> Am having to venture now into starting to deploy Windows 7 Pro into
>>> our AD (2003) environment. Current platform is all XP SP3/ Server
>>> 2003 based.
>>>
>>> All of my users are set as local admins via group policy. And I need
>>> to try and understand how that plays into UAC and Admin rights in
>>> Windows 7.
>>>
>>> For example,
>>>
>>> Using an existing 2003-AD Domained account, I can't see to install
>>> applications without having UAC kick in and ask for elevation.
>>> When I put in my normal-user account details, it fails and repeats. I
>>> have to enter a domain-admin account login to get the software to
>>> install.
>>> I don't really want to have to turn UAC off unless its essential, as I
>>> do agree with it checking for certain things, but can't see how to tie
>>> that back into the current infrastructure.
>>>
>>> Any advice??
>>>
>>> Thanks
>>>
>>> Adrian
>>>
>>
>>
 |  Next  |  Last
Pages: 1 2 3
Prev: Backup Schedule for 2003 Domain Controllers
Next: Migrate CA from the W2003 DC to a W2008R2 DC