![]() |
Sysop Can't Modify Teacher Account |
||||||
Kenn's
20001005: Sysop Can't Modify Teacher Account
October/2000
|
Another discovery submitted by Neil B is that the Sysop account can no longer modify the Teacher account, or any other "Teacher-level" account. This is an undesirable side-effect of changes made last year to the WSD1 NT Server Prep Update diskette. Because there had previously been problems with teachers being unable to manage print queues in NT, the NT Update utility has been changed to add the Domain Teachers group to the Print Operators group. While this appears to have solved the print management problem, it has in turn caused this problem. "Print Operators" is one of NT's built-in local groups. The Sysop, being an "Account Operator" is permitted to manage all user accounts, except those which belong to built-in local groups other than "Users" and "Guests". At this time, all we can offer is this workaround. The technician must decide, on a school-by-school basis: Does the school want Sysop to be able to manage Teacher-level accounts or is it preferable for Teachers to be able to manage print queues? If you prefer that Sysop be able to manage Teacher-level accounts, you must remove the global group Domain Teachers from membership in the local group Print Operators. Unfortunately, there does not appear to be a solution that will allow both these issues to be resolved simultaneously, short of making Sysop a member of Domain Admins. |
||||||
DISCLAIMER: This document is intended for the reference of computer support personnel within Winnipeg School Division No. 1. There is no warranty or liability if procedures recommended here have an adverse affect on any systems. Use them at your own risk. Any trademarks mentioned are the property of their owners, none of whom have certified any information provided here. Opinions expressed here are personal only and do not represent the policy of Winnipeg School Division No. 1 or any other organization anywhere.
|