Re: Admin can't change time?

The administrators group has no permissions or rights over the laptop by
default. You need to be a member of domain admins group, or add another
[domain] group to the local administrators group of the laptop, to be able
to do this.

Here's some info. on my latter statement:
-- http://www.msresource.net/content/view/45/47/


The Domain Admins group is automatically added to the local administrators
group of any domain member when that machine is joined to the domain.
Therefore a domain admins member is an administrator on that member. The
administrators group has full control over AD and the DC or member, but
nothing else.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net


.

Relevant Pages

  • Re: Listing user privileges
    ... So the service works is Domain Admin, running on a member, ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... confirmed) that being a member of the Administrators group for the domain ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... that Domain Admins (therefore AD controller ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... Administrators group of domain is used only on the DCs. ... Domain Admins is member in Administrators group of each ... Administrators group) has no advanced privileges on a member server other ...
    (microsoft.public.windows.server.security)
  • Re: Listing user privileges
    ... Currently I have discovered that the service user being a member of the ... Domain Admins group resolves the issue, and I'm suspecting (but not yet ... Administrators group for the machine, so my task will be to identify what ... are the privilege differences between those two groups, ...
    (microsoft.public.windows.server.security)
  • Re: How to change domain administrator to limited/restricted user?
    ... Depending on the number of users, computers, member servers and the rest of the infrastructure, I might be tempted to start over. ... If it's "a" domain administrator, then remove the user from the ... Are the individual users direct members of the Domain Admins group or members of a group added to the Domain Admins group. ... Check a workstation or two and see if the user is a member of the local workstation administrators group. ...
    (microsoft.public.windows.server.sbs)