Re: Domain rights

From: Steven L Umbach (n9rou_at_comcast.net)
Date: 09/25/03 

Date: Thu, 25 Sep 2003 21:37:36 GMT

It should, but you really do not want them to be members of the domain admins group
and have them all powerful in the domain [not everyone anyhow]. By default the domain
admins group is installed in the local administrators group of all domain member
machines, though a local administrator can remove it which may be why you are
experiencing what you are - check the local administrators group membership on the
machines in question. --- Steve

"Brian Clements" <bclements@mbta.com> wrote in message
news:093d01c383a3$4b14fb40$a301280a@phx.gbl...
> Users are having problems(app doesn't start because of
> insufficient rights)running a specific application when
> logged in with a domain user acct that belongs to the
> domain admin group. If user logs in locally only app runs
> fine, if users domain account is added to local admin
> group the app runs fine. If a user belongs to domain
> admins shouldn't that user have full and unrestriced
> access to local machine?
>
> Win2K servers and workstations are used.
>
> Thank you.

Relevant Pages

  • Re: Domain rights
    ... but you really do not want them to be members of the domain admins group ... machines, though a local administrator can remove it which may be why you are ... experiencing what you are - check the local administrators group membership on the ...
    (microsoft.public.win2000.security)
  • Re: Domain and OU Permissions
    ... Use a VB script - you'll find examples on technet scriptcenter. ... vendor and ask them what privileges the account needs. ... of the Domain Admins group, then that's what you'll need to do - add the ... Only members of local administrators group can add other members to ...
    (microsoft.public.windows.server.active_directory)
  • Re: User default permissions in Windows Server 2003
    ... We haven't created a domain policy that modifies the members of the local ... admins group. ... "Bob Hollness" wrote: ... the default is that domain administrators are members of the local ...
    (microsoft.public.windows.server.general)
  • Re: Run-time error 3033
    ... > only users who can change the value of the property, are members of the ... > Admins group of the workgroup file which was used to secure the ... > database ... > So I suggest that you log on as a member of the Admins group, ...
    (microsoft.public.access.security)
  • Re: Run-time error 3033
    ... only users who can change the value of the property, are members of the ... Admins group of the workgroup file which was used to secure the ... database ... So I suggest that you log on as a member of the Admins group, ...
    (microsoft.public.access.security)