Re: Local admin rights not flowing through

Eric wrote:


The workstations did not have local administrator rights so the users could not install their own applications. 

	.... Which is generally a good thing.


I added into each user's workstation their domain login name and added them as local administrator.


Does this mean that you created a local account on the computer with the same username as the domain account? If so, why?


I can log in as them to the local workstation and gain local admin, but if I login into the domain I do not get local administrator rights.



Yes, that's the way it should work, if you created local accounts for each user, and then added only those local accounts to the local administrators group.


Here's what I tried:

Deleting the profiles, deleting references in the registry to that user, re-creating the profile by logging in again.

I noticed when I logged in with the new user that it took a while to create the profile. When I logged in with the original user, even though the profile directories were deleted it just said loading profile and entered winxp quickly. So it looks like it was grabbing a profile from somewhere. I examined the PC and their home directory but could not find another profile directory.

Created a new user on the domain, created a new user on the local workstation and this new user did get local admin.

Re-formatted a PC and re-patched. Added the original user in the local workstation as local administrator and the problem was still there. No local administrator rights.

It seems to be a profile/policy issue but no policies or roaming profiles are defined in the new domain.

Does anyone have any idea on what is going on with this?


The systems are acting perfectly normally, and there's nothing wrong. If you want your users to have local administrative privileges (which I think is a mistake, but it's your LAN) while logged in to the domain, simply add each user's domain account to the computer's local administrator group.


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having both at once. - RAH
.

Relevant Pages

  • Workgroup to Domain
    ... Login as domain user to create profile ... Logout and Log back in as local Administrator ... Copy local user profile to domain user profile: ... Logoff the Domain Account and then Login as the Local Administrator ...
    (microsoft.public.win2000.networking)
  • RE: RIS resetting customized configuration on RIPrep image ??
    ... it looks for a Local Administrator Account and if it ... finds it copies that Administrator Profile to the Default USer Profile and ... "Admin" on your Source RIPREP Image. ... during the Mini-Setup Wizard the Default User Profile is not ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Profile
    ... this time it keeps the profile when I log off and back on...very strange. ... "Pegasus (MVP)" wrote: ... promote her to a local administrator ...
    (microsoft.public.windowsxp.general)
  • Re: Local admin rights not flowing through
    ... I am trying to add them to the local administrators group. ... >> The workstations did not have local administrator rights so the users could ... >> as them to the local workstation and gain local admin, ... >> re-creating the profile by logging in again. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Multiple Administrators and Other Users Residing under "Documents and Settings"
    ... First let's verify the corruption and what profile is being used for the ... local administrator account. ...
    (microsoft.public.windowsxp.customize)