Re: Local Administrator
- From: "Cary Shultz" <cwshultz@xxxxxxxx>
- Date: Thu, 2 Mar 2006 19:39:31 -0500
KJ,
Good points.
If that is the case then the OP might want to consider looking at filemon
and regmon from http://www.sysinternals.com to make the changes to the
Directory Structure/Registry so that this is not an issue....
While this is a bit more tedious and time consuming upfront, it might be a
good solution. *Might*
--
Cary W. Shultz
Roanoke, VA 24012
"kj" <kj@xxxxxxxxxxx> wrote in message
news:u6nJtzhPGHA.3164@xxxxxxxxxxxxxxxxxxxxxxx
Probably your user only needs some additional permissions to the file
system and/or registry to accomodate the database updates.
You may opt to just simply do the administrator thing.
So this line adds domain\user1 to the local Administrator group on
Workstation1
cusrmgr -u domain\user1 -m \\workstation1 -alg Administrators
...and this line takes it away.
cusrmgr -u domain\user1 -m \\workstation1 -dlg Administrators
--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:Os9bzXhPGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
Thank you kj and the rest of you!!
What I need is the users to have, ocasionally, local admin rights over
their own workstations (never the server). The reason for this is because
every time there is an update on the server database, the clients try to
update the workstation and they need local admin rights for this.
So if user1 uses workstation1, user2 uses workstation2, and so on, I want
user1 to have local admin rights over workstation1 so they can update the
client on their local machine.
Hope this all makes sense.
I think both Paul Williams and Paul Bergson approach might help me. I
have to study this now.
Cheers!!
Fernando
"kj" <kj@xxxxxxxxxxx> wrote in message
news:OJVmziUPGHA.3016@xxxxxxxxxxxxxxxxxxxxxxx
You have a group of 10 users that occasionaly need to be a local
administrator on a single database server?
If that is correct,
Then create a domain security group and add the 10 users to it.
When they need to be local admins on the datatbase server use
cusrmgr.exe to add the group to the local administrators group on the
database server. When the requirment is done, use cusrmgr.exe to remove
the domain group from the local administrator group. Obviously if you
will need to do this often, two one line batch files will make life
easier.
--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uNKyRqRPGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Hello,
I have 10 users who are using a database client which needs local
administrator rights every time there is an update on the database
server.
I was thinking on creating a group policy, within an OU, in such a way
I could give local admin rights to users who are member of that group.
Is there a way to set up the AD in such a way that a user can have
Local Administrator Rights for an specific machine?
Thank you very much,
Fernando.
.
- References:
- Local Administrator
- From: Fernando
- Re: Local Administrator
- From: kj
- Re: Local Administrator
- From: Fernando
- Re: Local Administrator
- From: kj
- Local Administrator
- Prev by Date: Re: DSQuery
- Next by Date: Re: Slow AD logon from remote offices .......
- Previous by thread: Re: Local Administrator
- Next by thread: Re: Local Administrator
- Index(es):
Relevant Pages
|
