Re: Win2K AD account rights don't carry through on XP Pro

From: Ray at <%=sLocation%> (%=sLocation%)
Date: 10/16/03 

Date: Wed, 15 Oct 2003 23:38:57 -0400

Do you have the DC set as your DNS server on the XP machine?

Also, if you log on to your XP machine as a local admin and enter this at
the command prompt (cmd.exe), what is the response?

net localgroup administrators "NameOfYourDomain\domain admins" /ADD

Ray at home

"Steve" <anonymous@discussions.microsoft.com> wrote in message
news:09b501c39390$580e9430$a301280a@phx.gbl...
> I setup a Win2k Active Directory Server with most of the
> defaults, except for passwords and accounts. When I
> attached a Windows 2000 Pro machine to the Domain I could
> log into the Win2K Pro box with a Domain admin account
> and I have local admin rights. I could add other Domain
> accounts to local groups on the Win2K box.
>
> When I attached a XP Pro box (the same way) I can log in
> with a domain admin account but I don't have local admin
> rights. When I try to add domain accounts to the local
> group I can't even see the Domain Controller accounts. I
> can access files on the Domain Controller but it's under
> something like a domain user rights rather than admin
> rights. I think the problem may be somewhere in Policies
> but I'm not sure.
>
> Any ideas? Thanks!

Relevant Pages

  • Re: Open a UNC path with different credentials
    ... which is a local admin on every machine on the domain. ... all workstations, and then add domain user accounts to the domain group as ... domain-based workstation admin accounts setup for the purpose). ...
    (microsoft.public.scripting.vbscript)
  • Re: Giving local Admin rights to AD 2003 Domain Admin users
    ... This posting is provided "AS IS" with no warranties, and confers no rights. ... of local admin group in the machine. ... tasks with out addin the account as a member of local admin. ...
    (microsoft.public.windows.server.active_directory)
  • Mapping to W2003 user rights/access?
    ... was required to have a lot of people with domain admin ... when it comes to access/user rights. ... Hopefully not domain admin... ... What access can be used for accounts used to do ...
    (microsoft.public.windows.server.migration)
  • Re: local admin account password
    ... What I think would be a better scheme is to set a very complex* random ... This eliminates the vulnerability created by weak admin passwords ... Do you think if someone wanted to break the local admin account they ...
    (Focus-Microsoft)
  • Re: Script not working correctly for users w/out admin rights to t
    ... Could it be that when you have tested this for accounts that have admin ... rights to the server. ... The code should account for the memberOf attribute having ...
    (microsoft.public.windows.server.scripting)