Re: Administrator Rights not Propogating

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Kevin,

Thanks for the prompt response. I think this script you have will help my
problem, but maybe I need to state my goal better. I want my local users to
have admin rights only to their local PC's when they login to the domain on
that particular computer (thiers) whether they login to the domain or just to
the local PC.

I have manually added the users to be local admins; if they login to the
machine and not the domain. What I am having issues with is when they login
to the local machine while it is pointed at the domain the users are not
getting the rights I would like them to have.

I do not want these users to have Domain admin rights when they login to the
domain from any particular computer. Would this script do that?

Hope this clears things up some. I really appreciate the help.

Kevin D. Goodknecht Sr. [MVP] wrote:
>> I just added a new user to my AD. This user was given admin rights to
>> the domain. When I login to the client PC this user does not have the
>> admin rights that were assigned in AD.
>
>Domain Admins do not automatically get local admin rights.
>You can use a logon script for this.
>How To Force Adding Of Domain Admin Group to Local Admin Group
>http://support.microsoft.com/kb/555026/en-us
>
>> I can login to the domain just fine. I have viewed the event logs and
>> there is nothing there. I would like this account to have admin
>[quoted text clipped - 21 lines]
>> ensure that you can contact the server that authenticated you..
>> ......................... BGSERVER1 failed test Connectivity
>
>Nothing in the event logs at all?
>What does netdiag say?
>

--
Thanks so Much

Mike

Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/windows-server-ad/200512/1
.

Relevant Pages

  • Re: getting me ducks in a row - concepts
    ... Don't create local login accounts for users, ... > the user has local admin rights and you will want to tweak this using RegMon ... keys on the server? ...
    (microsoft.public.windows.server.sbs)
  • RE: Cannot print from session when user login into TS
    ... thing is our other stand alone server worked fine (without admin rights), ... > When a user login into the terminal server using his own login ID, ... > print anything to the remote printer. ... we have users cannot install printer when they are in their own ...
    (microsoft.public.win2000.termserv.clients)
  • Re: Administrator Rights not Propogating
    ... > login to the domain or just to the local PC. ... > I do not want these users to have Domain admin rights when they login ... need to add a local account for each user or you could just let them use the ... I did this on my kids computers because one of the games they ...
    (microsoft.public.windows.server.active_directory)
  • Re: Getting sysadmin rights back to my domain account
    ... changing the authentication mode. ... Query Analyzer and add your Windows login to the sysadmin ... >the machine I should have Admin rights on the SQL ...
    (microsoft.public.sqlserver.security)
  • Re: Hacker activity?
    ... >login to a server, most as root but some are attempts to login to ... >telnet, all come from the same remote server, and all fail. ... >getting some odd cgi calls to a script on a secure ssl server. ... Make sure root cannot login to your system via ssh. ...
    (freebsd-questions)