Re: Accessing Admin Shares in Child Domain

From: Steven L Umbach (sumbach_at_nospam-ameritech.net)
Date: 12/14/03 

Date: Sun, 14 Dec 2003 14:32:19 GMT

I need to add that you will need to create a matching user account in the
children domains before you can add it to the domain admins global group for
that domain. --- Steve

"Steven L Umbach" <sumbach@nospam-ameritech.net> wrote in message
news:A6ZCb.11859$aw2.6273097@newssrv26.news.prodigy.com...
> The enterprise administrators global group is added to the administrators
> group on the domain controllers which allows it to administer domain
> controllers and Actice Directory, etc. The domain admins group of each
> domain is in the local administrators group of all domain members. Try
> adding that account to the domain admins group of the children
domains. ---
> Steve
>
>
> "Stephen Pettitt" <none@none.com> wrote in message
> news:enWiZ1jwDHA.1996@TK2MSFTNGP12.phx.gbl...
> > Whilst trying to access the c$ share on a machine in a child domain but
we
> > are prompted for a username/password unexpectedly. I am using an
account
> > with Enterprise Admin rights and can connect to the c$ share on DCs in
any
> > of the child domains, however this doesn't work for ordinary clients or
> > member servers. What is going wrong? I'm sure we used to be able to do
> > this! The reason we need this access is to enable deployment of the
> client
> > for our chosen Desktop Management System (LANDesk).
> >
> > Thanks in advance,
> >
> > Stephen.
> >
> >
>
>

Relevant Pages

  • Re: Password Problem - Server
    ... We are not sure if this user in in the Domain Admins ... accounts or the Administrator account. ... password on the administrators account has been changed.or I would say ... Open the Local Policy editor and check the ...
    (microsoft.public.windows.server.sbs)
  • Re: Adding user to Child Domain Group
    ... Domain Admins is a global group, ... "Administrators" group gives you almost full control - enough to do most day ... Others will require a seperate account. ... The reason here is that a global group is exposed to any domain that the ...
    (microsoft.public.win2000.active_directory)
  • Re: Local admin group?
    ... You are not well served by using Domain Admins for ... use of account that are members in it should be restricted. ... and have this added to the machine local Administrators group. ...
    (microsoft.public.win2000.security)
  • RE: software to control domain administrators
    ... Some of these tools allow you to give functionality to administrators ... state that it can lock out domain admins, at least no where that I read. ... Is the Administrator account ever restricted? ... them from the permissions of those objects. ...
    (Security-Basics)
  • Re: Deleteing C$ sharing
    ... to be local administrators. ... anything that will deny domain admins access to the computer. ... that auditing of logon events, policy change, and account management is ... administrators group on a domain computer as in [net localgroup ...
    (microsoft.public.win2000.security)