I am an administrator on an intranet. I use Windows Server 2003 to
create and manage incoming new user; also Exchange 2003 as the email
server.

Whenever I create a new user account for windows client logon and email
account, the new user will receive a message "Cannot start Microsoft
Office Outlook". To solve this problem I have only 2 options:

1. Set the new user account as Domain Administrator in Windows Server
2003
2. Set the new user account as an Administrator in the client computer

Although the problem is solved, it creates a very big security issue in
the network:

1. There are a lot of administrators in the network, Able to access to
most of the computer, may spoil network setting and configuration(can
you imagine the seriousness?)
2. With client side administrator status, the new user can install
anything into the computer.

If the new comer is a hacker, then he or she can steal company's data
easily. Prior to that, before I upgraded to Windows Server 2003, those
old users that were created by Windows NT has no such problem. I only
give them Power user status. I am looking to solve this problem for
years, there is no information found in the Internet. If you want
Microsoft to help you, per question is about USD150.00, they create
problem to earn money!

Anyone can help to solve the problem?

In oups.com,
XION typed:
I am an administrator on an intranet. I use Windows Server 2003 to
create and manage incoming new user; also Exchange 2003 as the email
server.

Whenever I create a new user account for windows client logon and
email account, the new user will receive a message "Cannot start
Microsoft Office Outlook". To solve this problem I have only 2
options:

1. Set the new user account as Domain Administrator in Windows Server
2003

Noooo!

2. Set the new user account as an Administrator in the client computer

Also, nooo!


Although the problem is solved, it creates a very big security issue
in the network:

Yes, that it would.


1. There are a lot of administrators in the network, Able to access to
most of the computer, may spoil network setting and configuration(can
you imagine the seriousness?)
2. With client side administrator status, the new user can install
anything into the computer.

If the new comer is a hacker, then he or she can steal company's data
easily. Prior to that, before I upgraded to Windows Server 2003, those
old users that were created by Windows NT has no such problem. I only
give them Power user status. I am looking to solve this problem for
years, there is no information found in the Internet. If you want
Microsoft to help you, per question is about USD150.00, they create
problem to earn money!

Well, I'm not sure that's true. So, back to your question - you need to let
us know a) what version of Outlook you're running, and b) what client OS
you're running, and how you installed Office/Outlook.



Anyone can help to solve the problem?

Thank you for the reply.

I am using Microsoft Office Outlook 2003 SP1, all of the client OSs are
either Win 2000 Pro SP4 or WinXP Pro SP2. All of the Office suites are
MS Office 97, 2000 and 2003. I need to install Outlook 2003 to each and
every client computer through network(no problem right?). User that is
created by Windows Server 2003 requires administrator status in order
to start Outlook 2003, even other programs like Word, Power Point and
Excel cannot be opened.

Hope for a reply. THank you!

In oups.com,
XION typed:
Thank you for the reply.

No worries - but please don't snip out all quoted text in your replies. It
makes it nearly impossible for anyone else to follow the thread.

I am using Microsoft Office Outlook 2003 SP1, all of the client OSs
are either Win 2000 Pro SP4 or WinXP Pro SP2. All of the Office
suites are MS Office 97, 2000 and 2003. I need to install Outlook
2003 to each and every client computer through network(no problem
right?).

Well, sure there can be problems. I'm a little lost, as well, so to clarify:
did you already install Office/Outlook 2003 (as an upgrade) to all the
workstations, or are you having *problems* installing it?

User that is created by Windows Server 2003 requires
administrator status in order to start Outlook 2003, even other
programs like Word, Power Point and Excel cannot be opened.

How did you do your Office 2003 upgrade, or rather, how are you trying todo
it?

If you do an upgrade in place, it should remove all the older versions - and
with Office 2003, I have never noticed a user account requiring one-time
admin rights to configure the applications once they were installed,
although I have run into this with older versions (pre-Office XP, I think).

Hope for a reply. THank you!

I think you'd be best off posting this in a Windows or Office or networking
group, really. Your users shouldn't need admin rights to open the
applications. But you haven't really provided enough detail for me to know
how to narrow this down further....

5 years ago I also got this problems!!! But it seems most of the
Administrator didn't met this problem or it just a very simply problem???
Couldn't found anyone talk about this problems.

Your problem - When the Domain user did not have "local account" in the
Local Computer and use that computer(already join into Domain) to logon to
"Domain" Server. This could created some of security and files access right
in the local computer.

Is that your problems?


"XION" ?????
oups.com...
I am an administrator on an intranet. I use Windows Server 2003 to
create and manage incoming new user; also Exchange 2003 as the email
server.

Whenever I create a new user account for windows client logon and email
account, the new user will receive a message "Cannot start Microsoft
Office Outlook". To solve this problem I have only 2 options:

1. Set the new user account as Domain Administrator in Windows Server
2003
2. Set the new user account as an Administrator in the client computer

Although the problem is solved, it creates a very big security issue in
the network:

1. There are a lot of administrators in the network, Able to access to
most of the computer, may spoil network setting and configuration(can
you imagine the seriousness?)
2. With client side administrator status, the new user can install
anything into the computer.

If the new comer is a hacker, then he or she can steal company's data
easily. Prior to that, before I upgraded to Windows Server 2003, those
old users that were created by Windows NT has no such problem. I only
give them Power user status. I am looking to solve this problem for
years, there is no information found in the Internet. If you want
Microsoft to help you, per question is about USD150.00, they create
problem to earn money!

Anyone can help to solve the problem?

Not really Chik, the client computer will download the user's profile
from the domain server, same problem. While I was using Windows NT, I
only need to set Domain user as Power User will do.

Due to licensing problem, I only can upgrade MS Outlook 2000 to 2003
version, I have a few new computer that is installed with MS Office
2003, I faced the same problem too. No problem during the installation.

During the Upgrading installation, the system will prompt to upgrade,
just press the "OK"s button will do, nothing much.

I found that if the Mail applet in the Control panel disappear(power
user or lower), you cannot use the office. Once you have the
administrator status, the Mail applet will appear again.

Hi XION,

If set to Power User level then the user can install any programs or tools
that come with spyware.

Chik

"XION" ?????
oups.com...
Not really Chik, the client computer will download the user's profile
from the domain server, same problem. While I was using Windows NT, I
only need to set Domain user as Power User will do.

I have doubt on this, while I was using Windows NT server, I need to
set user to Power User so that user able to use email, all of the while
was like that. How did you do?

In oups.com,
XION typed:
I have doubt on this, while I was using Windows NT server, I need to
set user to Power User so that user able to use email, all of the
while was like that. How did you do?

None of that should be necessary, if Outlook is installed to run everything
from the workstation. See my other reply...