Re: Local admin domain user

From: Ed Thurber (user@mail.com)
Date: 04/07/03 

From: "Ed Thurber" <user@mail.com>
Date: Mon, 7 Apr 2003 14:43:58 -0400

Michael:

Do not take this as an endorsement of your need to give users local admin
rights. I think this is extremely dangerous and ultimately makes your life,
as an IS worker, more difficult.

That said, on the client machine, add the users domain account to the local
administrators group. Do not create a new account, just open the local
administrators group, click "ADD", select the domain where the account
resides, and select the account. This will only work if the machine is part
of the domain (not a workgroup)

I am not familiar where "Local Users and Groups" is in XP, but in Windows
2000 it is under Computer Management (Right-Click "My Computer", select
"Manage")

"Michael N" <kindlydank@hotmail.com> wrote in message
news:00e101c2fd34$24f751b0$a401280a@phx.gbl...
> Hi-
>
> I know this problem has been addressed several times, but
> the answers given aren't fixing my problem.
>
> I need the users to have admin rights to their workstation
> (XP pro) while still remaining standard domain users. I
> have tried creating a local user with the same username as
> their domain account, granting it administrator rights and
> giving it the same password... no help.
>
> Please advise... thanks!!

Relevant Pages

  • Re: cannot add local user to local group
    ... You can control the Local Administrators group with the Restricted Groups Policy. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... One local user account "test" and one domain user ... "Member of" tab is empty. ...
    (microsoft.public.win2000.active_directory)
  • Re: Need Administrator authority
    ... I'm a member of the administrators group but that is apparently not enough. ... If you're logging onto the machine as garydean and the account is an admin/user account, then add user/garydean with full rights to match Administrators, because in some cases, Vista and UAC look at the combined rights of the two accounts, if that *user* account is missing or doesn't match the rights of Administrator's, then access denied or you don't have the privileges. ...
    (microsoft.public.windows.vista.general)
  • Re: Client Errors
    ... Dev says this typically occurs when the domain account is not part of the ... local users and or administrators group. ... client that is not having the problem. ... This posting is provided AS IS with no warranties and confers no rights. ...
    (microsoft.public.sms.admin)
  • Re: SMS_SITE_COMPONENT_MANAGER errors
    ... You would add the site server's machine account to the Administrators group ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Management" container in Active Directory. ...
    (microsoft.public.sms.misc)
  • Re: Do I HAVE to have local admin rights to run a Windows.Form app?
    ... rights based on a specific account. ... > I don't want to give my users local admin rights, but I want them to be ... > to run my app. ...
    (microsoft.public.dotnet.general)