Re: Can't add domain administrator to directory users' names

From: Jerry Paquette (nospampaquette@uwo.ca)
Date: 05/06/02 

Date: Mon, 06 May 2002 10:15:18 -0400
From: Jerry Paquette <nospampaquette@uwo.ca>

...

> Hi, Jerry -
>
> Is the XP machine a member of the domain? If so, Domain Admins should
> have been added to the local Administrators group automatically.

That's what I thought, but it doesn't seem to be working that way. The
machine is definitely a member of the domain though.

  If the
> machine is a member of the domain then Domain Admins should already have
> access to the machine through hidden shares (C$ and ADMIN$)
>
> This only works with XP Professional - since XP Home cannot join a
> domain you can't add the Domain Admins group (or any domain account) to
> the local Administrators group.

This is XP Professional.

>
> hth,
>

Relevant Pages

  • Re: How to change domain administrator to limited/restricted user?
    ... Depending on the number of users, computers, member servers and the rest of the infrastructure, I might be tempted to start over. ... If it's "a" domain administrator, then remove the user from the ... Are the individual users direct members of the Domain Admins group or members of a group added to the Domain Admins group. ... Check a workstation or two and see if the user is a member of the local workstation administrators group. ...
    (microsoft.public.windows.server.sbs)
  • Re: no Domain Admin rights to a Domain Server
    ... If the computer is still a member of the domain with proper DNS name ... the domain it needs to be joined to the domain again and the domain admins ... I can logon locally to the machine but the rights are that of a ... the server belongs to engineering and the person in charge ...
    (microsoft.public.win2000.security)
  • Re: Group Domain Admins cannot be found
    ... Instead of adding the group to Domain Admins, which means that the members will also be able to administer the Active Directory, servers etc., consider adding the group to the local Administrators group on the workstations using Restricted Groups in seperate GPO linked to the OU that has the computers you want them to be able to install Kix on. ... Use the "This group is a member of:" part of " Configure Membership for..." ...
    (microsoft.public.windows.server.active_directory)
  • Re: Group Policy on a remote computer
    ... By default, members of Domain Admins are administrators on member computers, but not Enterprise Admins. ... The domain controller is Windows Server 2003 R2 SP2; the target computer is XP Professional SP2. ... The usual process is to create a Group Policy Object in the Domains Active Directory and link it to the OU with the target computer accounts or user accounts. ...
    (microsoft.public.windows.group_policy)
  • Re: Login Script
    ... helpdesk person) to not be a member of "Domain Admins", but to be able to be ... > (The user cannot add himself nor can the computer startup ... > We could build a Startup script that would do this IF ...
    (microsoft.public.win2000.active_directory)