Printing permissions

[Gerald Carter]

Darryl Cording wrote:
> 
> Thanks Jerry,
> 
> Unfortuately this is not the problem as the local clients are using
> a FAT filesytem. Another intriguing thing I have noticed which may
> be related is that system policies are only inforced if the user
> is made a "Domain Admin" via the  "domain admin group" parameter.
> Also if the user is not in the domain admin group they get the
> error "...the state of your remembered conections can not be saved"
> when using NET USE commands.

Are you trying to use older profiles?  I have noticed that 
sometimes the ntuser.dat file gets truncated to 32Kb.  At that 
point it is corrupt and should be deleted.

> I guess it is more to do with group access permissions 
> as it seems to affect more than just printing.
> 
> Is this sort of behaviour normal, or do I have broken clients?

Something's not right that's for sure.  This is not normal 
behavior.

> I guess I could always give all users access to the 
> "Domain Admin" group then enforce stringent policy rules 
> so they don't break thier machines. My worry then would 
> be what backdoors does doing something like this open?

This would be an extremely bad idea in my opinion.






j-
________________________________________________________________________
                            Gerald ( Jerry ) Carter	
Engineering Network Services                           Auburn University 
jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw

       "...a hundred billion castaways looking for a home."
                                  - Sting "Message in a Bottle" ( 1979 )