Re: administrator on box also on domain?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

If you create a local account they have no rights in the domain.

--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.


"Victoria Bolton" <morkai at dreamwolf dot net> wrote in message
news:OE8xFRfnFHA.3568@xxxxxxxxxxxxxxxxxxxxxxx
>
> "Paul Bergson" <pbergson@xxxxxxxxxxxxxxxxx> wrote in message
> news:OO3AxtanFHA.3120@xxxxxxxxxxxxxxxxxxxxxxx
>> A local John.Doe cannot do anything in the domain, he would have NO
>> domain
>> rights or permissions.
>>
>
> He can if you add the domain user. Here is how ours used to be setup in
> NT4
>
> User was created on the domain and was just a member of the domain users
> account.
>
> We would then go to the client machine, log in as the administrator.
> Connect the PC to the domain from System Properties.
> Reboot
> Login as admin again.
> Go to Control panel and users and passwords.
> Add new user. This gives an option to specify a user name and a domain.
> Enter your user and your domain.
> Select Administrators from the next screen and that's all there is to it.
>
> They have local admin rights on that machine only and their assigned
> rights
> on the domain.
>
> I'm in the middle of switching to Ad right now as we have some new 2003
> servers but it all looks to work the same way.
>
>


.

Relevant Pages

  • Re: Securing Laptops in an AD environment
    ... Danny is right don't give users Administrator rights, ... Remember if the users have Admin rights, all programs (including virus, ... They would have to have a local account that is in the local admin group ... I would suggest not giving them a local account and not giving them admin ...
    (microsoft.public.windows.server.active_directory)
  • Re: administrator on box also on domain?
    ... We would then go to the client machine, log in as the administrator. ... They have local admin rights on that machine only and their assigned rights ...
    (microsoft.public.windows.server.active_directory)
  • Which rights to use to enable program running and nothing more?
    ... I am trying to set up a computer with a local account that ... has absolutely no rights exept to run the Office package (from shortcuts on ... When I set the rights it seems to be too strict and it doesn't work to start ... Even giving write rights to folders like 'temp' ...
    (microsoft.public.windowsxp.security_admin)
  • Removing IUSR_computername rights on IIS5
    ... Is there any way to remove the rights without creating new local account and changing the IIS 5 default anonymous account? ...
    (Focus-Microsoft)
  • Re: Web App need permission to post files to a virtual directory
    ... Since your servers are not in a domain, you have to use local accounts. ... Create an identical local account on both machine, ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.dotnet.framework.aspnet)