Admin privileges with AD
I have a small AD setup with an old 2000 server and a new 2008 server running AD. I have users that I assigned to the administrator group but they do not get admin privileges when the sign onto one of the workstations. I am new to AD and just
added the 2008 server to their system. Prior to adding the 2008 server there was the same issue.
August 17th, 2011 9:30pm
Hello,
make sure their group is member of the local admin group on the wanted computers.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft Student
Partner 2010 / 2011
Microsoft Certified Professional
Microsoft Certified Systems Administrator:
Security
Microsoft Certified Systems Engineer:
Security
Microsoft Certified Technology Specialist:
Windows Server 2008 Active Directory, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows Server 2008 Applications Infrastructure, Configuration
Microsoft Certified Technology Specialist:
Windows 7, Configuring
Microsoft Certified IT Professional: Enterprise
Administrator
Microsoft Certified IT Professional: Server Administrator
Free Windows Admin Tool Kit Click here and download it now
August 18th, 2011 2:53am
'Administrators' group is only about domain controllers. Place required users to the Domain Admins global group to make them administrators on all computers in a domain.MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA
August 18th, 2011 11:52am
Hi,
Members in Administrators group have full control of all domain controllers in the domain. However, if you want a user have admin privileges
on all workstations, you need to add the user in Domain Admins group.
For more information, please refer to this article:
http://technet.microsoft.com/en-us/library/cc756898(WS.10).aspx
Meanwhile, if you do not want to make the user as domain admin, I suggest you use Group Policy Restricted Groups to add domain user
into the local administrator group on the client.
Restricted Groups
http://technet.microsoft.com/en-us/library/cc785631(WS.10).aspx
Hope this helps.
Regards,
Bruce
Free Windows Admin Tool Kit Click here and download it now
August 19th, 2011 2:23pm