Re: What permissions do I need to use admin$ ?

From: Kerry Brown (kerry_at_kdbNOSPAMsys-tems.c*a*m)
Date: 11/29/05 

Date: Tue, 29 Nov 2005 13:25:27 -0800

Steven L Umbach wrote:
> You do not need to be a domain administrator unless the server in
> question is a domain controller which the user did not clarify. While
> domain admins global group is in the local administrators group of a
> domain computer by default any domain user account can be added or
> the credentials of any user in the local administrators group can be
> used including the built in administrator account.. --- Steve
>

Good point. That is probably the best option, to add the domain user account
to the local administrators group.

Kerry

>
> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
> news:ureMTJQ9FHA.1148@tk2msftngp13.phx.gbl...
>> Maury Markowitz wrote:
>>> I'm trying to mount admin$ of one of our NT Server machines onto my
>>> XP machine. I do not have permissions to do so, but I can't find the
>>> permissions I'd need.
>>>
>>> admin$'s own permissions cannot be set (or so it appears) because
>>> "This has been shared for administrative purposes. The permissions
>>> cannot be set."
>>>
>>> So how do I get permissions?
>>>
>>> Maury
>>
>> If in a domain you need domain admin permissions. If in a workgroup
>> then you must be a administrator on that machine.
>>
>> Why would you want to mount admin$? I can't think of any reason to do
>> this. At best if you need temporary access you should use Start ==>
>> Run ==> \\server_name\c$ or whatever drive you need access to. If
>> you need permanent access to the root of a system drive then
>> something is not right with your overall network security plan.
>>
>> Kerry

Relevant Pages

  • Re: Local Admin
    ... This posting is provided "AS IS" with no warranties, ... > the group that is your focus in the local Administrators group. ... > like the Domain Admins group to be a member of each and every WIN2000 and ... > you might want to include the Domain Admins group..... ...
    (microsoft.public.windows.server.active_directory)
  • Re: Administrator
    ... > the Local Administrators group a security risk? ... > Domain Admins available might be the only thing that saves you. ... > Sharepoint databases, right? ...
    (microsoft.public.sharepoint.portalserver)
  • Re: IPMSG.EXE
    ... permissions so that the Local Administrators Group (which includes the ... Domain Admins) has full access but the Local User Group (which contains the ... "Sanjeev" wrote in message ... > Some of the users on our compnay network have been found to be using IP ...
    (microsoft.public.security)
  • Re: Add Domain Admin to local XP Admin group
    ... Yes Domain Admins are in the Local Administrator group. ... local Administrators in a given workstation or in all Workstations. ... Jorge Silva ... members of the local Administrators group of the machine by default. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win 2003 Local Admin Problem
    ... >> You can use Restricted Groups feature of the GP to add Domain Admins into ... Windows Server - Directory Services ... >>> Domain Admins group from the local administrators group on the server. ...
    (microsoft.public.windows.group_policy)