Re: Admin Priveleges Not Working

From: Marina Roos [SBS-MVP] (marina_at_roos.nodontwantspam.nl.com)
Date: 06/07/04 

Date: Mon, 7 Jun 2004 19:58:59 +0200

Hi Gary,

SBS does use GPO. But earlier you said:

> >>The local admin accounts on
> >> all the machines were disabled by the Administrator as
> >> part of the LAN security policy

So who has done that?
Can you get in the policies at all from the server? 

-- 
Regards,
Marina
Microsoft SBS-MVP
"Gary" <anonymous@discussions.microsoft.com> schreef in bericht
news:18f3601c44c92$43535f10$a301280a@phx.gbl...
> Hi Marina, again thanks for the response. I'm pretty new
> to this & maybe I'm being thick. The Admin account hasn't
> changed - it is the only member of the administrator
> group but I haven't been able to use the appropriate
> privileges the past week. I've tried making another user
> a member of the administrator group - same again no
> access rights for forementioned tasks. What do you mean
> by change the policy back. i thought SBS never used GPO?
> Any suggestions?
>
> Thanks
> >-----Original Message-----
> >Err, Gary, aren't you the Administrator? So can you
> change that policy back?
> >
> >-- 
> >Regards,
> >
> >Marina
> >Microsoft SBS-MVP
> >
> >"Gary" <anonymous@discussions.microsoft.com> schreef in
> bericht
> >news:190b901c44c65$ca4cdfa0$a101280a@phx.gbl...
> >> Hi & thanks for the input. The local admin accounts on
> >> all the machines were disabled by the Administrator as
> >> part of the LAN security policy. I cannot now use the
> >> domain admin to do any of the admin tasks. Even on the
> >> SBS box the admin account won't add/ remove programmes
> >> etc. I made my own domain user account a member of
> >> the "administrator group" but that didn't work. This is
> >> obviously going to be a problem. Can I have been
> hacked?
> >> Is there anything I can try? Any suggestions
> appreciated.
> >>
> >> Thanks
> >> Gary
> >> >-----Original Message-----
> >> >you must be signed onto the workstation under an
> account
> >> which has local
> >> >admin rights to change from a wg to a domain.
> >> >
> >> >it's probably a bit late now, but I always change the
> >> local administrator
> >> >account's password before swinging to a workgroup,
> even
> >> if I think I know
> >> >it.
> >> >
> >> >"Jim Behning" <jimbehningmvp@atl.mindspring.com> wrote
> >> in message
> >> >news:q8u0c01ojumai7ip197tptvso2ogq3370k@4ax.com...
> >> >> When I add a computer to the domain from the
> >> workstation I go through
> >> >> the wizard and I enter the server administrator
> name,
> >> administrator
> >> >> password and domain name. I do this for all the
> times
> >> the wizard has
> >> >> fill in the blanks questions related to a domain
> user.
> >> Is that where
> >> >> you are having problems? The workstation is part of
> >> the workgroup
> >> >> Workgroup when you start the Network wizard? You do
> >> not use local
> >> >> workstation admin accounts to join a domain. Only
> the
> >> domain
> >> >> administrator (s) accounts.
> >> >>
> >> >>
> >> >>
> >> >> "Gary" <anonymous@discussions.microsoft.com> wrote:
> >> >>
> >> >> >Hi Jeff - thanks for your reply. I deleted one of
> the
> >> >> >accounts & ensured it wasn't part of the domain.
> When
> >> I
> >> >> >then tried to add it to the domain I get "Access
> >> rights
> >> >> >to create & delete computer objects are required to
> >> use
> >> >> >the Setup Computer Wizard" - on the SBS box. I now
> >> have a
> >> >> >client that can't be logged into as it isn't part
> of
> >> the
> >> >> >domain & doesn't have a local admin account to try
> &
> >> join
> >> >> >it to the domain. Any more suggestions? This is
> >> obviously
> >> >> >a pain & i'm starting to get worried.
> >> >> >
> >> >> >Cheers
> >> >> >
> >> >> >Gary
> >> >> >>-----Original Message-----
> >> >> >>Try deleting the computer account and rejoining
> it to
> >> >> >the domain.
> >> >> >>"Gary" <anonymous@discussions.microsoft.com>
> wrote in
> >> >> >message
> >> >> >>news:17d9101c4497f$57dcaa10$a101280a@phx.gbl...
> >> >> >>> Hi All,
> >> >> >>>        After having to use System Restore on a
> >> client,
> >> >> >>> I've noticed that our XP Pro workstations have
> all
> >> lost
> >> >> >>> Administrator Priveleges. All local admin
> accounts
> >> have
> >> >> >>> been disabled and the SBS admin is the only
> member
> >> of
> >> >> >>> the "administrators" group. The workstations log
> >> into
> >> >> >the
> >> >> >>> SBS server under the admin account but i can't
> >> System
> >> >> >>> Restore, Windows Update, Add/ Remove software
> etc.
> >> >> >These
> >> >> >>> workstations are fully patched but I checked 3
> >> others
> >> >> >>> that haven't been used the last month & weren't
> >> patched
> >> >> >>> last month. They all have Admin account full
> >> priveleges
> >> >> >>> therefore I'm assuming it was one of last months
> >> >> >>> hotfixes. I can't remove the relevant hotfixes
> as I
> >> >> >don't
> >> >> >>> have the privelege & all I could find Googling
> was
> >> Kb
> >> >> >>> 313222. Has anyone come across this problem
> >> recently?
> >> >> >>> Does anyone have any suggestions as to how to
> >> rectify
> >> >> >>> this situation. As you can imagine this is
> >> annoying &
> >> >> >>> next Tues is Windows Update time!
> >> >> >>>
> >> >> >>> TIA
> >> >> >>>
> >> >> >>> Gary
> >> >> >>
> >> >> >>
> >> >> >>.
> >> >> >>
> >> >>
> >> >> Jim B. SBS  MVP
> >> >> remove the mvp to send email
> >> >
> >> >
> >> >.
> >> >
> >
> >
> >.
> >

Relevant Pages

  • Re: Sharing Outlook 2003 calendar
    ... even as administrator i cant log onto the domain (all i can do is log on to ... > Right so the workstation has joined the Domain okay and are you getting ... >> The server can see the workstation in network places. ... >>> Okay is the workstation connected to the SBS Server (sorry silly ...
    (microsoft.public.outlook.installation)
  • Re: Add a user to workstation
    ... rename the admin account on each workstation, remove the description of the admin account and change the password of each station. ... Administrator user and put the description of the typical admin account to flood into that user, make that only a domain user and plug that user on every workstation in domain but make it only a user. ... I figure a script but I'm not completely sure where to start. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Security Log Event 529
    ... systems use IE7. ... It appears to be the administrator of each WORKSTATION ... not the domain admin account. ...
    (microsoft.public.windows.server.sbs)
  • Re: Password Problem
    ... Is this PC part of an SBS network? ... If this PC isn't part of a domain, you can reset her password with any ... Dell & HP machines have a blank Administrator password by default. ... > Not that it is relavent to the workstation problem..... ...
    (microsoft.public.windows.server.sbs)
  • Re: Setup Problem
    ... server system with 2003 sbs. ... On the workstation make sure you have set the Administrator ... Select the Domain radio button and enter the name of your sbs ...
    (microsoft.public.windows.server.sbs)
Loading