Re: Help needed setting up roaming administrator

From: Steve Hull (msnnews.REMOVE_TO_REPLY_at_steve-hull.com)
Date: 08/27/04 

Date: Thu, 26 Aug 2004 19:41:10 -0400

OK, I'm confused. I get your point that LOCAL\JOE is not the same
user as DOMAIN\JOE, but how do I make DOMAIN\JOE a local admin? When
I'm logged in as DOMAIN\JOE, I can't access any of the local user
accounts . On the other hand, if I'm logged in as a local admin, I
can't access any of the DOMAIN user accounts. If I can't access
DOMAIN\JOE from a local admin's account, I don't know how I can make
him a member of a local group.

Thanks,

- Steve

On Thu, 26 Aug 2004 18:25:06 -0400, Paul Adare - MVP - Microsoft
Virtual PC <padare@newsguy.com> wrote:

>In article <8nnsi09g91d0qit7uh89uni7k38mgp8hm8@4ax.com>, in the
>microsoft.public.win2000.security news group, Steve Hull
><msnnews.REMOVE_TO_REPLY@steve-hull.com> says...
>
>> Am I missing something, or is there some trick to assigning local
>> Admin priviliges to a user with a roaming profile? There are some
>> programs I want to run on the local machine that require local admin
>> priviliges, and I'd like to run them even though I'm logged in as a
>> roaming user. I've run into problems using RUN AS that are a subject
>> for another day.
>>
>
>You're totally misunderstanding the subject. You've never made the
>domain\joe_admin account a member of the local administrators group.
>Simply assigning the domain\joe_admin account a profile that has been
>used by a local admin does not make that account a local admin on the
>box.

Relevant Pages

  • Re: Domain Profiles Borked - Cant Grant Admin Rights - HELP!!!
    ... > status of their account. ... local Admin rights were given to ... > afflicted machine and give them local Admin rights, ... the SID of your users is no longer the same as it was. ...
    (microsoft.public.windowsxp.setup_deployment)
  • RE: local admin account password
    ... Do you think if someone wanted to break the local admin account they ... more recovery console and don't think cached logins will work. ... 5)My main idea/plan is to store all the passwords on a central SQL server. ...
    (Focus-Microsoft)
  • Re: Distribution lists
    ... Also I have found that making that account the local admin does bupkiss ... local admin rights on the sharepoint server. ... I have made the Sharepoint Central admin app pool owner of the OU I ...
    (microsoft.public.sharepoint.windowsservices)
  • RE: Correct setup of XP-Pro computer on Win2K Domain
    ... Setting up a local account on the xp machine does not result in local admin ... rights for that user, you need to put them in the local admin group. ... > inconsistent problems with security when I setup a new XP-Pro workstation. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Automatically making AD users local administrators on computers in SBS 2003
    ... You have to remember that even though you give the user a different account ... to install software and then they logoff and back in as themselves, ... > can use this special local administrator account. ... >> This will automatically give each user that logs in local Admin rights. ...
    (microsoft.public.windows.server.sbs)