Re: Trouble with admin access after creating trust.

You belong to the "Administrators" group, but what does that mean? You are
provided acess to security that the Administrators have been given access
to, that doesn't mean you are logged on as an administrator.

Look at something that you are trying to gain access to and see if the
Administrators group has been provided access to it.

Take a couple of minutes and read the below, I think you will better
understand my point.
http://www.microsoft.com/technet/technetmag/issues/2006/03/WindowsConfidential/default.aspx

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

<schmierer2@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1162945845.056520.57110@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
My apologies, it's still not giving me administrator access, I was
logged onto the wrong domain.

Situation still exists - on the 2000 domain, I log on with an account
from the 2003 domain yet I recieve no admin permissions.

I have added Domain Admins from the 2003 domain into the builtin
Administrators group on the 2000 Domain.


schmierer2@xxxxxxxxxxxxxxxxxxxxx wrote:
I'm not talking about the local group on the PC. I'm talking about the
domain group called Administrators, which is a local built in group. I
added the domain admins group from the 2003 domain to it (on the 2000
domain) but it wouldn't work.

Weird thing though, come in today and it is working. Nothing has
changed...but I don't see how it would need 2 days to replicate
permissions or whatever it does.


Paul Bergson [MVP-DS] wrote:
You should have local admin access on the local machine, but you won;t
have
any special privleges at all in the domain.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

<schmierer2@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1162851813.710255.278010@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Thanks Paul. I actually want domain access in the 2000 domain, with
an
account from the 2003 domain. I did add my domain 2003 admin account
into the 2000 local administrator group, but when I log on the 2000
domain with that account I don't get admin access.

I can't do what you said though because the domain admin group won't
allow users/groups to be added from another domain, which is why I
needed to add it to the administrators local group.

Cheers,
Owen.


Paul Bergson [MVP-DS] wrote:
You don't by default have admin credentials in this domain, they
have to
be
added. Have the admin from the 2000 domain add your 2003 id in to
the
domain admins group.

--
Paul Bergson
MVP - Directory Services
MCT, MCSE, MCSA, Security+, BS CSci
2003, 2000 (Early Achiever), NT

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no
rights.

<schmierer2@xxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1162772138.516628.315630@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi guys. I'm sure there is something simple that I'm not doing
properly but I'm looking for some help.

I've created a trust (two way) from a 2003 domain to a 2000 domain
and
the trust works fine. I can log on the 2000 domain with an
account
from my 2003 domain no problem. I have added an admin global
group
from the 2003 domain into the local Administrators group on the
2000
domain... my problem is that when I log onto the 2000 domain with
an
account from the 2003 domain then I don't have admin access.

Am I doing something wrong?

Thanks very much,
Owen.





.

Relevant Pages

  • Re: Rid AD of Circular Group Membership
    ... I'll try to keep this going; because it might be useful to another admin ... The quess is each has an account and uses it, ... part of stations) into the machine local Administrators group. ... Administrators Group has a members: ...
    (microsoft.public.windows.group_policy)
  • Re: Security Breach in AD! Help!
    ... For the domain check the membership of the administrators group, ... on every user account in any of those ... success and failure in Domain Controller Security Policy. ... admin credentials on. ...
    (microsoft.public.win2000.security)
  • Re: Rid AD of Circular Group Membership
    ... under assumption everyone is admin all ways. ... The quess is each has an account and uses it, ... part of stations) into the machine local Administrators group. ... Craft in the empowerments with the group design elected, ...
    (microsoft.public.windows.group_policy)
  • Re: Bad XP problem
    ... no way he can re-create the account that owns them. ... OTOH, the files probably *are* readable by administrators, so your advice is ... >> This has to do with a lost admin password in XP. ... The PC won't boot, it ...
    (sci.electronics.repair)
  • Re: Trouble with admin access after creating trust.
    ... Situation still exists - on the 2000 domain, I log on with an account ... from the 2003 domain yet I recieve no admin permissions. ... domain group called Administrators, which is a local built in group. ... into the 2000 local administrator group, but when I log on the 2000 ...
    (microsoft.public.windows.server.active_directory)