Re: Administrator Equivalent Creation
From: Andrei Ungureanu (andreix.nospam_at_msn.com)
Date: 11/15/04
- Next message: DaveG: "Group Policy Password controls"
- Previous message: Paul Bergson: "Re: DC still exists after DCPROMO"
- In reply to: William McIlroy: "Administrator Equivalent Creation"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 15 Nov 2004 19:34:37 +0200
strange ...
This issue can came from to things (assuming that you don't have restricted
groups implemented in GP and that you have made that user a member of Domain
Admins group not just Administrators) :
1. You have logged on with that user on a workstation that do not have
Domain Admins group added to local Administrators group.
2. You have modified the user group membership but you haven't logged off
and on.
-- Andrei Ungureanu www.eventid.net Free Windows event logs reports http://www.altairtech.ca/evlog/ "William McIlroy" <WilliamMcIlroy@discussions.microsoft.com> wrote in message news:550686B1-1DC8-4DAF-AE34-6FC991791824@microsoft.com... >I created a user in Active Directory Users and Computers and made that user >a > member of the same groups that Administrator is a member of. After > logging > on with the new user I found I could not change the computer's clock > because > of lack of privilege. Second scenario: I created a user by using Copy of > Administrator and little more than giving the user a name and password. > That > user could change the computer clock. Question: Why? I was under the > impression that the groups of which the user is the member in the > aggregate > give the user certain privileges. Apparently not. What is happening? > -- > William McIlroy >
- Next message: DaveG: "Group Policy Password controls"
- Previous message: Paul Bergson: "Re: DC still exists after DCPROMO"
- In reply to: William McIlroy: "Administrator Equivalent Creation"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
