Re: Domain user with local administrators' right

Tuan

Andrei's answer is applicable to both PCs and member servers. If you add a
domain account to the domain admins group, this is in turn a member of the
local administrators group (this is the default, so I assume from what you've
written you have taken no action to change this). If you log on to the server
with this domain account (selecting the domain from the drop down box under
advanced options on the logon screen), you will be logged on with an account
that has both local and domain admin rights.
If the server is a domain controller, then there is no local administrators
group so membership of domain admins should suffice. It is not possible to
add a local account in to any domain groups, so a domain account must be used.

Gordon


"Tuan" wrote:

> I'm installing a software on an application (IIS) server which needs a local
> admin priviledge on this server and a domain admin priviledge to obtain
> domain credentials. What kind of user account can perform this task?
>
> Thank you very much for your help.
> Tuan
>
> "Andrei Ungureanu" wrote:
>
> > a user that is part of domain group named Domain Admins it will be by
> > default a local admin. (that is because Domain Admins group is part of the
> > local Administrators group - by default).
> >
> > So .. you'll only need to add you domain user to Domain Admins group.
> >
> > Andrei Ungureanu
> > www.eventid.net
> >
> >
> > "Tuan" <Tuan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> > news:D7B54EBA-6182-4ACE-8A9B-1173D5A659BC@xxxxxxxxxxxxxxxx
> > > Hi all,
> > >
> > > I'm not a network guru. What I am trying to do is setting up a single
> > > forest with a domain controller, an application, a mail, and a MS SQL
> > > servers
> > > using 4 virtual PCs running windows 2003.
> > >
> > > I was able to get all 4 servers join the domain and running in the forest.
> > > However, some configurations on these individual servers require both
> > > local
> > > admin and domain admin priviledges.
> > >
> > > Can anyone tell me how to set up a user account with both local and domain
> > > administrator priviledges?
> > >
> > > Thank you in advance.
> > > Tuan
> >
> >
> >
.

Relevant Pages

  • Re: Password Problem with Server Login
    ... We periodically reboot our server and had ... login with the Administrator account like we usually do and the ... We also tried an account ... however we have other users who are members of the "Domain Admins". ...
    (microsoft.public.windows.server.active_directory)
  • Re: NT4->2003 Computer Account Migration Problem
    ... win2k3 domain, domain admin is by default the computer's local admin. ... and remigrate the computers using a specific account to perform migration ... Add NT Domain Admin to Win2k3Dom Domain admins group and Win2k3Dom ...
    (microsoft.public.windows.server.migration)
  • Re: Administrators Group in Local Users and Groups
    ... I have verified that an Account Operator can indeed log into a DC. ... I imagine adding themselves to the domain admins group would require a trick ... add your self to the local administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: ISA Server Error
    ... Since I have just been testing, I installed as one of my domain admins, ... that account is listed in the full isa rights, as well as BUILTIN/Admins, ... To be ale to syncronize the DC on the ISA server, ... My ISA_2 server is pointing to my new DC_2 server for DNS ...
    (microsoft.public.isa)
  • Re: Administrator account does not have suficent privileges to cre
    ... I am using the administrator account of the domain on the original server. ... The account is a member of the Domain Admins account. ...
    (microsoft.public.windows.server.active_directory)