Re: local administrator

From: Shenan (shenans@hotmail.com)
Date: 06/01/02 

From: "Shenan" <shenans@hotmail.com>
Date: Fri, 31 May 2002 22:12:44 -0500

At a command prompt on one of the computers in question, type the following:

net localgroup administrators

and press enter.

This will list everyone with local administrator rights to the machine. If
this machine is part of a domain and you do not see the username that you
were trying to add in this list with the domain name in front of that
username (ie: mydomain\username), and they log INTO the domain, then you
have not added them correctly to the local administrators group of the
machine.

add them (when logged in as local administrator) by typing:

net localgroup administrators "mydomain\username" /ADD

and pressing enter, making the appropriate substitutions, of course. I
assure you this does make the users a member of the local administrators
group. It does not, necessarily, mean they can do ANYTHING to that
machine - dependent on what domain policies you also have in place..
However, by default, that machine is 'theirs to do with as they please.'.
Make sure you put them in the 'administrators' group, the 's' at the end is
NOT a typo.

I am sure I will be corrected if I am incorrect. *smile*

"Robert Jenkin" <robert.jenkin@surecomp-usa.com> wrote in message
news:a59e01c208df$d1422f20$39ef2ecf@TKMSFTNGXA08...
>
> >-----Original Message-----
> >How do I configure a domain user to have
> >local administrator rights on their pc. My users log
> >in to our domain, but, in doing so they do not have the
> >rights they need on their local machine and I need to
> >have them function as local administrators.
> >
> >thanks
> >.
> >
> The following (posts) suggest adding the user account to
> the administrator group. I have tried that and it does not
> work. That does not give them admin rights on their local
> machine.

Relevant Pages

  • Re: management tool and usernames
    ... The logged in user must be a local administrator or member of a group which ... is in the administrators group on the machine you want to manage. ... > it prompts me user name and password for the domain although the user is ... > (on win xp it dosen't ask anything just asks the comp name i wont to ...
    (microsoft.public.win2000.networking)
  • Re: Local admin rights not flowing through
    ... I am trying to add them to the local administrators group. ... >> The workstations did not have local administrator rights so the users could ... >> as them to the local workstation and gain local admin, ... >> re-creating the profile by logging in again. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Unable to see Default Website under user context on IIS 5.1 XP
    ... Local Administrator rights to users. ... "doug" wrote: ... >>Adding the user to the Administrators group works so I ... >>permissions issue. ...
    (microsoft.public.inetserver.iis)
  • RE: Unable to see Default Website under user context on IIS 5.1 XP
    ... Giving user's local administrator rights ... isn't an option in our environment. ... "doug" wrote: ... >>Adding the user to the Administrators group works so I ...
    (microsoft.public.inetserver.iis)
  • Re: Remove users fom all Local Administrators!!
    ... assuming u have a login script, add the following statement to your batch ... :to remove user NT ID from local administrators group ... I've alot of clients who their domain account is added to local ... so if there are a script to remove all accounts from local Administrator ...
    (microsoft.public.windows.server.scripting)