Re: local user creation on W2K server DC

From: Steven L Umbach (n9rou_at_n0-spam-for-me-comcast.net)
Date: 12/24/04 

Date: Fri, 24 Dec 2004 20:06:13 GMT

That can not be done. There is only one local user on a domain controller -
the built in administrator account used for Recovery Console and Directory
Services Restore. Beyond that you will have to rely on user rights,
privileged group membership [server operators and such], and maybe Group
Policy [software installation] to give a user more powers on a domain
controller without actually making them a domain admin. If you want a non
domain admin to create and manage users/groups/Group Policy, that can be
done via user delegation which give a users additional permissions to an
Active Directory object or container. -- Steve

"Brian" <Brian@discussions.microsoft.com> wrote in message
news:0B396189-342C-410B-970E-C3A1072D0335@microsoft.com...
> Is it possible to create a local user on a Windows 2000 Server domain
> controller? If so how or where. Thanks

Relevant Pages

  • Re: local user creation on W2K server DC
    ... No. There's no concept of a local user on a DC. ... are domain users. ... > Is it possible to create a local user on a Windows 2000 Server domain ...
    (microsoft.public.win2000.security)
  • local user creation on W2K server DC
    ... Is it possible to create a local user on a Windows 2000 Server domain ...
    (microsoft.public.win2000.security)
  • Re: dcpromo without domain admin rights
    ... This is a Domain Admin responsibility. ... put it into the active directory ou called "jcns". ... The default domain controller policy is modified to grant the rights ... permissions, manage replication topology, replicating ...
    (microsoft.public.windows.server.active_directory)
  • Re: Server 2003 Permissions problems
    ... If he were simply logging onto his local machine I ... >controller. ... Because of this there is no local account for him specifically. ... >Is there a way to grant him full local access without giving him domain admin ...
    (microsoft.public.windows.server.networking)
  • Re: Admin Right
    ... Controller wrote: ... | assigned admin rights to one of the users and when I asked ... Are you saying that this user has domain admin rights, ...
    (microsoft.public.win2000.security)