Re: Local Administrator

Thanks kj!

That's a hello of a tip and a half!

cheers,

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:u6nJtzhPGHA.3164@xxxxxxxxxxxxxxxxxxxxxxx
Probably your user only needs some additional permissions to the file
system and/or registry to accomodate the database updates.

You may opt to just simply do the administrator thing.

So this line adds domain\user1 to the local Administrator group on
Workstation1

cusrmgr -u domain\user1 -m \\workstation1 -alg Administrators

...and this line takes it away.

cusrmgr -u domain\user1 -m \\workstation1 -dlg Administrators


--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:Os9bzXhPGHA.3976@xxxxxxxxxxxxxxxxxxxxxxx
Thank you kj and the rest of you!!

What I need is the users to have, ocasionally, local admin rights over
their own workstations (never the server). The reason for this is because
every time there is an update on the server database, the clients try to
update the workstation and they need local admin rights for this.

So if user1 uses workstation1, user2 uses workstation2, and so on, I want
user1 to have local admin rights over workstation1 so they can update the
client on their local machine.

Hope this all makes sense.

I think both Paul Williams and Paul Bergson approach might help me. I
have to study this now.

Cheers!!

Fernando


"kj" <kj@xxxxxxxxxxx> wrote in message
news:OJVmziUPGHA.3016@xxxxxxxxxxxxxxxxxxxxxxx
You have a group of 10 users that occasionaly need to be a local
administrator on a single database server?

If that is correct,

Then create a domain security group and add the 10 users to it.

When they need to be local admins on the datatbase server use
cusrmgr.exe to add the group to the local administrators group on the
database server. When the requirment is done, use cusrmgr.exe to remove
the domain group from the local administrator group. Obviously if you
will need to do this often, two one line batch files will make life
easier.

--
/kj
"Fernando" <fernando@xxxxxxxxxxxxx> wrote in message
news:uNKyRqRPGHA.2036@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I have 10 users who are using a database client which needs local
administrator rights every time there is an update on the database
server.

I was thinking on creating a group policy, within an OU, in such a way
I could give local admin rights to users who are member of that group.

Is there a way to set up the AD in such a way that a user can have
Local Administrator Rights for an specific machine?

Thank you very much,

Fernando.









.

Relevant Pages

  • Re: Local Administrator
    ... and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Local Administrator
    ... system and/or registry to accomodate the database updates. ... What I need is the users to have, ocasionally, local admin rights over ... their own workstations (never the server). ... the domain group from the local administrator group. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Permissions
    ... >servers are available to service the logon request. ... >database does not have the proper domain registrations ... >If you are logged on as an administrator at a Domain ...
    (microsoft.public.win2000.security)
  • Re: SharePoint Portal search is not working after changing admin paasw
    ... Just a thought but it could be the access account to the actual SQL server. ... Query on SQL and see if it lets you in as the Administrator. ... > Verified Password for services on our Database Server ...
    (microsoft.public.sharepoint.portalserver)
Loading