Power Users Can Modify Common Groups

 Last reviewed: March 11, 1997
Article ID: Q149091
3.50 3.51 WINDOWS kbnetwork kbbug3.50 kbbug3.51

The information in this article applies to:

  • Microsoft Windows NT Workstation versions 3.5 and 3.51
  • Microsoft Windows NT Server versions 3.5 and 3.51
  • Microsoft Windows NT Workstation version 4.0
  • Microsoft Windows NT Server version 4.0

SYMPTOMS

Only administrators should be able to modify common groups in Windows NT Server and Workstation. However, members of the Power Users group are able to add, delete, and modify icons in common groups. Power Users can also create new common groups and delete existing common groups.

This problem does not occur on NT 4.0 Workstation or Server when installed on an NTFS partition. Default permissions on the %systemroot%\profiles \all users directory which defines common groups and icons grants full control to the Administrator and System acconts with read-only access to the everyone group. NT 4.0 Workstation and Server installed on a fat partition are subject to the same limitation as 3.5X.

WORKAROUND

To resolve this problem, upgrade to Windows NT Workstation and Server version 4.0 with on an NTFS partition..

You can work around this problem by not using the Power Users group.

STATUS

Microsoft has confirmed this to be a problem in Windows NT versions 3.50 and 3.51. This problem was corrected in Windows NT Workstation or Server version 4.0 when installed on NTFS partitions.

KBCategory: kbnetwork kbbug 3.51
KBSubcategory: ntdomain NTSrvWkst
Additional reference words:3.50 3.51 power common
Keywords : ntdomain NTSrvWkst
Version : 3.50 3.51
Platform : WINDOWS

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: March 11, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.