Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm wondering if placing a user in the Power Users groups restricts that user's ability to remotely mount either admin$ or c$. My limited testing tells me that they can, but I'm curious to hear other thoughts from more experienced MS admins.

So far, Microsoft's docs on this are not useful, if you can point me to a doc with a definitive answer, that would be great too.

share|improve this question

2 Answers 2

up vote 5 down vote accepted

The administrative shares are only accessible to members of the local "Administrators" or "Backup Opeartors" (with "Server Operators" also having access on Windows Server OSs) on a groups on a given computer. If a user is a member of "Power Users" but not "Administrators" or "Backup Operators" (or "Server Operators") they will not be able to access the administrative shares.

Here's a doc from Microsoft re: these shares: http://technet.microsoft.com/en-us/library/cc722490.aspx

share|improve this answer
    
Thanks for the clarification Evan. –  dr.pooter Jun 24 '09 at 16:53
    
Thanks again - my searches were focused on terms like 'permission' and 'privilege'. This is a great resource. –  dr.pooter Jun 24 '09 at 16:59

Here's an excellent article on why not to use the Power Users group: http://blogs.technet.com/markrussinovich/archive/2006/05/01/the-power-in-power-users.aspx; if Power Users can view the admin shares, that's proably symptomatic of a larger issue.

In Windows Vista and above, the Power Users group has the same rights as Users.

share|improve this answer
    
Thanks for the link. Good reading. –  dr.pooter Jun 24 '09 at 17:01

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.