Re: Local admin rights not flowing through

It should work [if that is what you REALLY want to do] if you add their
domain user account to the local administrators group on their workstation.
You may have other issues going on here also though. First make absolutely
sure that you have DNS configured correctly for your domain as per the KB
article in the link below [NEVER ever have an ISP DNS server is the
preferred DNS server list of ANY domain computer] and run the support tool
netdiag on your domain controllers and a couple domain workstations having
this problem and run the support tool dcdiag and gpotool on your domain
controllers looking for any problems. Also look in the logs of the domain
controllers and domain workstations via Event Viewer to see if any related
problems are found. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382

"Eric" <Eric@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E9700A33-9CFD-4CF8-8E92-E52150E88DA0@xxxxxxxxxxxxxxxx
> I've got a weird issue that I hope someone knows what's going on...
>
> I recently moved from my NTSBS 4.0 domain into a Win2003 AD. I have 7
> workstations all with the same issue. I had to re-create the user
> accounts
> in 2003 since I couldn't find a direct upgrade path which was no big deal.
>
> Anyway, all of my workstations are XP SP2.
>
> The workstations did not have local administrator rights so the users
> could
> not install their own applications. I added into each user's workstation
> their domain login name and added them as local administrator. I can log
> in
> as them to the local workstation and gain local admin, but if I login into
> the domain I do not get local administrator rights.
>
> Here's what I tried:
>
> Deleting the profiles, deleting references in the registry to that user,
> re-creating the profile by logging in again.
>
> I noticed when I logged in with the new user that it took a while to
> create
> the profile. When I logged in with the original user, even though the
> profile directories were deleted it just said loading profile and entered
> winxp quickly. So it looks like it was grabbing a profile from somewhere.
> I
> examined the PC and their home directory but could not find another
> profile
> directory.
>
> Created a new user on the domain, created a new user on the local
> workstation and this new user did get local admin.
>
> Re-formatted a PC and re-patched. Added the original user in the local
> workstation as local administrator and the problem was still there. No
> local
> administrator rights.
>
> It seems to be a profile/policy issue but no policies or roaming profiles
> are defined in the new domain.
>
> Does anyone have any idea on what is going on with this?


.

Relevant Pages

  • Re: Local admin rights not flowing through
    ... I am trying to add them to the local administrators group. ... >> The workstations did not have local administrator rights so the users could ... >> as them to the local workstation and gain local admin, ... >> re-creating the profile by logging in again. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Users and Groups
    ... please create a local administrator (not domain ... user) and logon to the client workstation locally, and then try to install ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: domain workstation account for software install
    ... Do you mean as a "domain administrator" or a "local administrator on the ... just on the target workstation: ... Server Management | Standard Management | Security ... have "install" permissions. ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 R2 and Vista Enterprise - Trust Relationship
    ... change the local administrator password. ... if you have issues with this there are free programs to reset the local admin password. ... How to properly rejoin a client workstation to an SBS 2003 Domain ...
    (microsoft.public.windows.server.sbs)
  • Re: NetJoinDomain() on remote workstation
    ... account, it should just log you in to the remote workstation, and you will ... The at command can be run from a remote machine! ... credentials are not supplied in the app. ... I know the machine name and local Administrator password for each ...
    (microsoft.public.win32.programmer.networks)
Loading