Re: Admin Priveleges Not Working

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Gary (anonymous_at_discussions.microsoft.com)
Date: 06/07/04 

Date: Mon, 7 Jun 2004 06:20:55 -0700

Hi Marina, again thanks for the response. I'm pretty new
to this & maybe I'm being thick. The Admin account hasn't
changed - it is the only member of the administrator
group but I haven't been able to use the appropriate
privileges the past week. I've tried making another user
a member of the administrator group - same again no
access rights for forementioned tasks. What do you mean
by change the policy back. i thought SBS never used GPO?
Any suggestions?

Thanks
>-----Original Message-----
>Err, Gary, aren't you the Administrator? So can you
change that policy back?
>
>--
>Regards,
>
>Marina
>Microsoft SBS-MVP
>
>"Gary" <anonymous@discussions.microsoft.com> schreef in
bericht
>news:190b901c44c65$ca4cdfa0$a101280a@phx.gbl...
>> Hi & thanks for the input. The local admin accounts on
>> all the machines were disabled by the Administrator as
>> part of the LAN security policy. I cannot now use the
>> domain admin to do any of the admin tasks. Even on the
>> SBS box the admin account won't add/ remove programmes
>> etc. I made my own domain user account a member of
>> the "administrator group" but that didn't work. This is
>> obviously going to be a problem. Can I have been
hacked?
>> Is there anything I can try? Any suggestions
appreciated.
>>
>> Thanks
>> Gary
>> >-----Original Message-----
>> >you must be signed onto the workstation under an
account
>> which has local
>> >admin rights to change from a wg to a domain.
>> >
>> >it's probably a bit late now, but I always change the
>> local administrator
>> >account's password before swinging to a workgroup,
even
>> if I think I know
>> >it.
>> >
>> >"Jim Behning" <jimbehningmvp@atl.mindspring.com> wrote
>> in message
>> >news:q8u0c01ojumai7ip197tptvso2ogq3370k@4ax.com...
>> >> When I add a computer to the domain from the
>> workstation I go through
>> >> the wizard and I enter the server administrator
name,
>> administrator
>> >> password and domain name. I do this for all the
times
>> the wizard has
>> >> fill in the blanks questions related to a domain
user.
>> Is that where
>> >> you are having problems? The workstation is part of
>> the workgroup
>> >> Workgroup when you start the Network wizard? You do
>> not use local
>> >> workstation admin accounts to join a domain. Only
the
>> domain
>> >> administrator (s) accounts.
>> >>
>> >>
>> >>
>> >> "Gary" <anonymous@discussions.microsoft.com> wrote:
>> >>
>> >> >Hi Jeff - thanks for your reply. I deleted one of
the
>> >> >accounts & ensured it wasn't part of the domain.
When
>> I
>> >> >then tried to add it to the domain I get "Access
>> rights
>> >> >to create & delete computer objects are required to
>> use
>> >> >the Setup Computer Wizard" - on the SBS box. I now
>> have a
>> >> >client that can't be logged into as it isn't part
of
>> the
>> >> >domain & doesn't have a local admin account to try
&
>> join
>> >> >it to the domain. Any more suggestions? This is
>> obviously
>> >> >a pain & i'm starting to get worried.
>> >> >
>> >> >Cheers
>> >> >
>> >> >Gary
>> >> >>-----Original Message-----
>> >> >>Try deleting the computer account and rejoining
it to
>> >> >the domain.
>> >> >>"Gary" <anonymous@discussions.microsoft.com>
wrote in
>> >> >message
>> >> >>news:17d9101c4497f$57dcaa10$a101280a@phx.gbl...
>> >> >>> Hi All,
>> >> >>> After having to use System Restore on a
>> client,
>> >> >>> I've noticed that our XP Pro workstations have
all
>> lost
>> >> >>> Administrator Priveleges. All local admin
accounts
>> have
>> >> >>> been disabled and the SBS admin is the only
member
>> of
>> >> >>> the "administrators" group. The workstations log
>> into
>> >> >the
>> >> >>> SBS server under the admin account but i can't
>> System
>> >> >>> Restore, Windows Update, Add/ Remove software
etc.
>> >> >These
>> >> >>> workstations are fully patched but I checked 3
>> others
>> >> >>> that haven't been used the last month & weren't
>> patched
>> >> >>> last month. They all have Admin account full
>> priveleges
>> >> >>> therefore I'm assuming it was one of last months
>> >> >>> hotfixes. I can't remove the relevant hotfixes
as I
>> >> >don't
>> >> >>> have the privelege & all I could find Googling
was
>> Kb
>> >> >>> 313222. Has anyone come across this problem
>> recently?
>> >> >>> Does anyone have any suggestions as to how to
>> rectify
>> >> >>> this situation. As you can imagine this is
>> annoying &
>> >> >>> next Tues is Windows Update time!
>> >> >>>
>> >> >>> TIA
>> >> >>>
>> >> >>> Gary
>> >> >>
>> >> >>
>> >> >>.
>> >> >>
>> >>
>> >> Jim B. SBS MVP
>> >> remove the mvp to send email
>> >
>> >
>> >.
>> >
>
>
>.
>

Relevant Pages

  • Re: Keep admins off of client machines
    ... the sharepoint admin is simple, just create a standard user account for them ... The 'Domain Administrator' account is ... Domain Administrator password. ... takes a thorough understanding of such priveleges to do so. ...
    (microsoft.public.windows.server.sbs)
  • Re: firewall on budget ?
    ... 1)Work in Admin mode, and through 'run as', browse ... If working in admin mode and doing runas to browse in a guest account. ... Installing a program, getting an error, then doing the run as, can be ... running as administrator all the time. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Login as local admin
    ... So if i basically ensure that my domain administrator account is a member of ... the schema admins, and enterprise admins, and login using these credentials, ... The article does not reference "local" administrator (as far as I ... If you choose to use an account other than the built-in administrator ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: XP (SP2) user passwords
    ... Safe Mode requires an administrator to log on the machine. ... I always suggest checking who has Admin accounts, ... administrator account, which normally does not appear, and in SP2, I don't ...
    (microsoft.public.windows.mediacenter)