my first client server network

Windows Server 2003 Standard - 1 each
10 CALs

Windows 2000 Pro SP 4 - 8 each

If a user is a member of the "user group" on the network
[when logging onto the domain], at what level is the user,
relative to the computer from which the user has logged on?

Can a user be a member of the domain's "user group" but a
member of the "power users group" for the local machine?
If yes, does the user "sue" have to log out of the domain,
and log onto the local computer?

Thanks for your attention to my very basic problem.

Sincerely,
Jo

"Jo Smith" wrote in message news:1468d01c4186d$3550b4c0$(E-Mail Removed)...
: Windows Server 2003 Standard - 1 each
: 10 CALs
:
: Windows 2000 Pro SP 4 - 8 each
:
: If a user is a member of the "user group" on the network
: [when logging onto the domain], at what level is the user,
: relative to the computer from which the user has logged on?

The user logs onto the domain with a global logon ID, not local. When a
computer is added to a domain, domain users is added to the local users
group and domain administrators is added to the local administrators group.
So, your global user, unless modified, belongs to the local users group.

: Can a user be a member of the domain's "user group" but a
: member of the "power users group" for the local machine?

Sure, logon to the computer with admin privs and added the global user to
the local power users group.

: If yes, does the user "sue" have to log out of the domain,
: and log onto the local computer?

I dunno. Who is Sue? If Sue is the global user account, no. When she logs
on with her global user account, if that account has been added to the local
power users group, she has those rights. If she logs on with a local user
account, which may also be Sue, then that is a different account even if it
has the same domain.

The reason is the account name is not Sue, it's domain\Sue, either
computername\Sue (local domain) or domain\Sue (global domain).

Your name is Jo. If your last name is Smith, then you are not Jo Jones,
even though both of you are named Jo.

HTH...

--
Roland Hall
/* This information is distributed in the hope that it will be useful, but
without any warranty; without even the implied warranty of merchantability
or fitness for a particular purpose. */
Online Support for IT Professionals -
http://support.microsoft.com/service...p?fr=0&sd=tech
How-to: Windows 2000 DNS:
http://support.microsoft.com/default...b;EN-US;308201

a semi-common practice is to add the users domain user account to the LOCAL
admin group on their own computer. this allows them to do whatever they want
on their own computer, but still only have "user" rights on the domain



"Roland Hall" <nobody@nowhere> wrote in message
news:(E-Mail Removed)...
> "Jo Smith" wrote in message
news:1468d01c4186d$3550b4c0$(E-Mail Removed)...
> : Windows Server 2003 Standard - 1 each
> : 10 CALs
> :
> : Windows 2000 Pro SP 4 - 8 each
> :
> : If a user is a member of the "user group" on the network
> : [when logging onto the domain], at what level is the user,
> : relative to the computer from which the user has logged on?
>
> The user logs onto the domain with a global logon ID, not local. When a
> computer is added to a domain, domain users is added to the local users
> group and domain administrators is added to the local administrators
group.
> So, your global user, unless modified, belongs to the local users group.
>
> : Can a user be a member of the domain's "user group" but a
> : member of the "power users group" for the local machine?
>
> Sure, logon to the computer with admin privs and added the global user to
> the local power users group.
>
> : If yes, does the user "sue" have to log out of the domain,
> : and log onto the local computer?
>
> I dunno. Who is Sue? If Sue is the global user account, no. When she
logs
> on with her global user account, if that account has been added to the
local
> power users group, she has those rights. If she logs on with a local user
> account, which may also be Sue, then that is a different account even if
it
> has the same domain.
>
> The reason is the account name is not Sue, it's domain\Sue, either
> computername\Sue (local domain) or domain\Sue (global domain).
>
> Your name is Jo. If your last name is Smith, then you are not Jo Jones,
> even though both of you are named Jo.
>
> HTH...
>
> --
> Roland Hall
> /* This information is distributed in the hope that it will be useful, but
> without any warranty; without even the implied warranty of merchantability
> or fitness for a particular purpose. */
> Online Support for IT Professionals -
> http://support.microsoft.com/service...p?fr=0&sd=tech
> How-to: Windows 2000 DNS:
> http://support.microsoft.com/default...b;EN-US;308201
>
>