Re: Creating a real administrator user

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Richard Mueller [MVP] (rlmueller-NOSPAM_at_ameritech.NOSPAM.net)
Date: 12/01/04 

Date: Tue, 30 Nov 2004 22:59:35 -0600

Hi,

To change wallpaper and unlock the taskbar, you need to be Administrator on
the local machine. I think you made the user a member of the Builtin
Administrators group. I don't believe this makes the user Administrator on
local client machines. However, if you make the user a member of the Domain
Admins group, this should work. By default, the Domain Admins group is a
member of the local Administrators group on each computer that has joined
the domain. 

-- 
Richard
Microsoft MVP Scripting and ADSI
Hilltop Lab web site - http://www.rlmueller.net
--
"CoolerThanYou" <CoolerThanYou@discussions.microsoft.com> wrote in message
news:C74AD914-1C62-4BDB-AB96-E0AA41DC8650@microsoft.com...
> Well for instance, this user can't unlock the taskbar or change the
> wallpaper. Do I have to make that computers user account in AD trusted?
that
> might be a dumb question btw ;)
>
> "Jimmy Andersson [MVP]" wrote:
>
> > What happens?
> > Can you be more specific?
> >
> > Regards,
> > /Jimmy
> > -- 
> > Jimmy Andersson, Q Advice AB
> > Microsoft MVP - Directory Services
> > ---------- www.qadvice.com ----------
> >
> >
> > "CoolerThanYou" <CoolerThanYou@discussions.microsoft.com> wrote in
message
> > news:95863C46-7DBF-4678-BFB1-93269A76F30E@microsoft.com...
> > > Hi, I trying to get more comfortable with server 2003 and AD, I've
created
> > > a
> > > couple of users, and added them to the administrators User group, but
it
> > > doesn't seem like it actually treats them as administrators. What am I
> > > missing here?
> >
> >
> >

Relevant Pages

  • Re: xp pro - win2k domain woes
    ... You can make the domain user account a member of the built-in administrators ... Administrators group rights in order to do this. ... > programs on their local machine as well as be a member to a win2k domain? ...
    (microsoft.public.win2000.networking)
  • Re: Administrator cant change security
    ... administrators group on the domain member can configure permissions on any ... computers can not reliably contact a domain controller. ... I'm signing on as Administrator on a second Windows 2003 server that is ...
    (microsoft.public.windows.server.security)
  • Re: Security groups being removed
    ... be the expected behavior because of the AdminSDHolder thread on the DC ... This object is used to control the permissions of user accounts that are ... members of the built-in Administrators or Domain Administrators groups. ... a user account is a member of one of these administrative groups because ...
    (microsoft.public.windows.server.sbs)
  • Re: True difference between Domain Admin grp and Administrators Group
    ... is a member of the domain "administrator" group by default. ... The domain admin group not only has local administrator ... group is automatically added to the local "administrators" group. ... Members of this group have full control of the domain. ...
    (microsoft.public.windows.server.general)
  • RE: Permissions
    ... administrative permissions in each domain (Domainb.local ... Create a local group on the member server in the ... >Symptom 1 often occurs when the domain administrators ...
    (microsoft.public.win2000.security)