Re: Can't add domain administrator to directory users' names

From: Jerry Paquette (nospampaquette@uwo.ca)
Date: 05/06/02 

Date: Mon, 06 May 2002 10:54:35 -0400
From: Jerry Paquette <nospampaquette@uwo.ca>

allan grossman ms-mvp wrote:

> Jerry Paquette said...
>
>
>>That's what I thought, but it doesn't seem to be working that way. The
>>machine is definitely a member of the domain though.
>>
>
> Hmmmm. Maybe delete the machine account and rejoin the domain? Or if
> you just want access and don't care how it gets fixed, add the
> domain_name\Domain Admins group to the local administrators group?

I can't do this--only the local machine and its groups and users is
available as a location when I try to add under group properties. It's
like the local machine doesn't know it's a member of the domain.

>
> Does the Win2k server have SP2 installed?
>
> I have local admin on my XP Professional machine through a domain
> account (I don't use a domain admin account for everyday stuff) and can
> manipulate local profiles just fine.

That is also my case as well but it adds an extra step since I normally
work logged in as domain admin.

>
> This is mighty strange.
>

Relevant Pages

  • Re: AD to desktop Permissions problem
    ... account to the local administrators group on her workstation without making ... her a Domain Admin. ... workstation, the latter to your entire domain. ... when the faculty member logs ...
    (microsoft.public.windows.server.general)
  • Re: Corrupt Contact
    ... Is the account you are using to delete an object is a member of domain admin ... Would anyone know how to get rid of it? ...
    (microsoft.public.windows.server.active_directory)
  • Re: "Access Denied" message when adding member server in existing
    ... Are you sure you're performing dcpromo with a privileged account and not ... that's member of the domain admins group? ... I havent tried any other account by assigining domain admin privilege. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Share Permissions and Security Groups
    ... >> storage on a member server. ... >> If the account is in no group that directly or indirectly has been ... >> resources that are controlled and add the groups of principals ... > From your comments I ensure that each Project Folder NTFS does not inherit ...
    (microsoft.public.security)
  • Re: Finding a Hacker
    ... definitely had the capability to obtain the domain admin credentials and may ... If the hacker did get in remotely using an administrator account on the ... Your problem is not restricting remote desktop connections. ...
    (microsoft.public.windows.server.active_directory)