Re: NT 4 domain Admin group to XP local admin group

From: Bobby McMillan [MSFT] (robertmc_at_online.microsoft.com)
Date: 11/24/03 

Date: Mon, 24 Nov 2003 19:44:34 GMT

Andy,

If you know the local administrators password, Attempt to remove and then
readd the machine to the domain. As Roger stated, Domain administrators
get added to the local administrators group during a domain join.

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------

|
| It is wrong. This should work.
| Obviously the machine was joined to the domain
| by a domain admin (or pre-added to it in server
| manager) in order to log in with the domain account.
| However, that you needed to add the domain admin
| group into the local administrators group indicates
| something is wrong with the joining as this happens
| automatically when the machine joins the domain.
|
| --
| Roger Abell
| Microsoft MVP (Windows Server System: Security)
| MCSE (W2k3,W2k,Nt4) MCDBA
| "Andy Halsall" <anonymous@discussions.microsoft.com> wrote in message
| news:042b01c3b285$9f0f4b40$a001280a@phx.gbl...
| >
| > Hello
| >
| > Can anyone help with the following?
| >
| > We r still on a NT 4 domain, we have just recently done
| > our Windows XP build to be used on this domain.
| >
| > On the build we have placed the NT 4 domain admins group,
| > into the local Windows XP administrators group. But that
| > dosn't seem to take effect whe you log onto the XP
| > station as a domain admin you dont appear to be a local
| > XP administrator.
| >
| > Has anyone else had this or can suggest anything? is it
| > because its a NT 4 domain admin group being placed into a
| > Xp adminsitrators group?????????????
| >
| > Thanks in advance.
| >
| >
|
|
|

Relevant Pages

  • Re: How to start cmd.exe BOTH as administrator locally AND domain admin?
    ... What you need to do, in order to get domain and local administrator access is to create a domain account that is a member of the Domain Administrators group, and then make that account also a member of the local Administrators group on the machine you're working on. ... e.g. if I am domain admin and type NET STOP SPOOLER as domain admin, you get Access denied on the local Vista system. ...
    (microsoft.public.windows.vista.security)
  • Re: WSS and Active Directory Account Creation Mode
    ... Add your domain users to the local Administrators group of the server ... WSS security will apply. ... I haven't tested adding groups to the local Administrators group. ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: restricted groups for local admin rights
    ... I'm referring to local administrators and not domain administrators?) ... > describe you want to use the "member of" option for restricted groups. ... > way you can add a global group to the administrators group without affecting ...
    (microsoft.public.windows.group_policy)
  • Re: Forcing groups into the local admin account
    ... Does this remove the local Administrative account for the ... machine as being part of the local Administrators group? ... >of the GPO that you use. ...
    (microsoft.public.windows.group_policy)
  • GPO Application
    ... there's no policy affecting them after said policy, ... and removing them from the local administrators group (this is an attempt to ... I even remember once within a server 2000 environment I locked down my own ...
    (Security-Basics)
Quantcast