Re: Local admin rights not flowing through
- From: "Eric" <Eric@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Mon, 2 Jan 2006 08:24:03 -0800
I am trying to add them to the local administrators group.
This is a small company who's employees are technical in nature. We do a
lot with engineering and designing/programming. The people need local admin
access to perform their job.
>From my past experience, if you create a local user and add them into the
local administrators group and that login ID has the same login ID as the
domain account then when the user logs into the domain they will get the
local administrator privs. This is not happening in my current setup and is
needed.
"Bruce Chambers" wrote:
> Eric wrote:
>
> >
> > The workstations did not have local administrator rights so the users could
> > not install their own applications.
>
> .... Which is generally a good thing.
>
>
> > I added into each user's workstation
> > their domain login name and added them as local administrator.
>
>
> Does this mean that you created a local account on the computer with
> the same username as the domain account? If so, why?
>
>
> > I can log in
> > as them to the local workstation and gain local admin, but if I login into
> > the domain I do not get local administrator rights.
> >
>
>
> Yes, that's the way it should work, if you created local accounts for
> each user, and then added only those local accounts to the local
> administrators group.
>
>
> > Here's what I tried:
> >
> > Deleting the profiles, deleting references in the registry to that user,
> > re-creating the profile by logging in again.
> >
> > I noticed when I logged in with the new user that it took a while to create
> > the profile. When I logged in with the original user, even though the
> > profile directories were deleted it just said loading profile and entered
> > winxp quickly. So it looks like it was grabbing a profile from somewhere. I
> > examined the PC and their home directory but could not find another profile
> > directory.
> >
> > Created a new user on the domain, created a new user on the local
> > workstation and this new user did get local admin.
> >
> > Re-formatted a PC and re-patched. Added the original user in the local
> > workstation as local administrator and the problem was still there. No local
> > administrator rights.
> >
> > It seems to be a profile/policy issue but no policies or roaming profiles
> > are defined in the new domain.
> >
> > Does anyone have any idea on what is going on with this?
>
>
> The systems are acting perfectly normally, and there's nothing wrong.
> If you want your users to have local administrative privileges (which I
> think is a mistake, but it's your LAN) while logged in to the domain,
> simply add each user's domain account to the computer's local
> administrator group.
>
>
> --
>
> Bruce Chambers
>
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace. Or you can have freedom. Don't ever count on having
> both at once. - RAH
>
.
- References:
- Re: Local admin rights not flowing through
- From: Bruce Chambers
- Re: Local admin rights not flowing through
- Prev by Date: Re: making administrator account the DRA in XP Profession
- Next by Date: Re: Trojan/Browsela/Looksky
- Previous by thread: Re: Local admin rights not flowing through
- Next by thread: Re: Local admin rights not flowing through
- Index(es):
Relevant Pages
|
