Re: Accessing Admin Shares in Child Domain

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 12/14/03 

Date: Sun, 14 Dec 2003 12:57:04 GMT

The enterprise administrators global group is added to the administrators
group on the domain controllers which allows it to administer domain
controllers and Actice Directory, etc. The domain admins group of each
domain is in the local administrators group of all domain members. Try
adding that account to the domain admins group of the children domains. ---
Steve

"Stephen Pettitt" <none@none.com> wrote in message
news:enWiZ1jwDHA.1996@TK2MSFTNGP12.phx.gbl...
> Whilst trying to access the c$ share on a machine in a child domain but we
> are prompted for a username/password unexpectedly. I am using an account
> with Enterprise Admin rights and can connect to the c$ share on DCs in any
> of the child domains, however this doesn't work for ordinary clients or
> member servers. What is going wrong? I'm sure we used to be able to do
> this! The reason we need this access is to enable deployment of the
client
> for our chosen Desktop Management System (LANDesk).
>
> Thanks in advance,
>
> Stephen.
>
>

Relevant Pages

  • Re: Split AD and Server Administration
    ... If you do not need them to do all that on domain controllers then you can ... domain controllers without being in the administrators group for the domain, ... > of Windows Servers. ... > while only having the ability to add/remove computers from AD. ...
    (microsoft.public.win2000.security)
  • Re: Allowing a Domain User Admin Rights to a Couple of Domain Servers
    ... > that Domain Admins members are in the default members of each ... > machine local Administrators group on the members of the domain. ... >> If they're domain controllers, then you're pretty much out of luck. ...
    (microsoft.public.windows.server.security)
  • Re: Non domain admins installing software on domain controllers
    ... > of domain controllers and member servers distributed through out ... > object for administrators within each country and for member server we ... > domain controllers in that they cannot perform the action because they ... > install patches as and when they become available. ...
    (microsoft.public.win2000.security)
  • Re: Giving admin rights to a subset of computers
    ... level for the computers you want this to happen on. ... member of" for administrators at the OU level. ... domain assuming that domain controllers are not in the scope of management ...
    (microsoft.public.win2000.security)
  • Non domain admins installing software on domain controllers
    ... object for administrators within each country and for member server we ... domain controllers in that they cannot perform the action because they ... the local admin group. ... install patches as and when they become available. ...
    (microsoft.public.win2000.security)