Re: Local Admin vs Domain Admin problems

From: Steven L Umbach (sumbach_at_ameritech.net)
Date: 05/30/03 

Date: Fri, 30 May 2003 21:27:39 GMT

           If you have not done so, add the users domain account to the
local administrators account on their machine. If that does not work, then
create a local user account that is a member of the local administrators
group on their machine and have them log in with that account to the local
machine to see if problems persist. It is possible that even if a user logs
on to a machine as a domain member and has local administrative rights on
that machine, they could still be subject to group policy user configuration
[probably case with network properties restriction]. You can use gpresult
[free download from MS] to find out where Group Policy configuration is
coming from. --- Steve

"Andrew" <andrew@fredlewis.com> wrote in message
news:ObZay7tJDHA.2148@TK2MSFTNGP12.phx.gbl...
> This company I do work for has a client who needs to be able to install
> programs on his local machine and change things. I give him administrative
> rights on his local machine but when I go into his network properties it
> says the property *** is disabled. The only way I can get it to work is
to
> give him Domain Admin rights and set that as his primary group.
>
> I also have a similiar issue with quickbooks 2001. It only works if the
user
> is a member of the domain admins group and set to primary.
>
> How do I go about these things that need higher level rights without
making
> someone a domain admin?
>
>