Re: Adding new domain user to workstation

Well, any time a domain user's credentials cannot be authenticated - eg. DC
failure, connectivity issue, etc., that user will be denied network access
to a domain member..

By default, when a workstation joins an AD domain, the domain administrators
group is added to the local machine administrators group; and the domain
users group is added to the local machine users group. So as long as the
machine is joined to the domain, you should not need to add domain users as
local users unless you have changed or want to change the default behavior.

Doug Sherman
MCSE, MCSA, MCP+I, MVP


"scptech" <scptech@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:403B73AA-E0A8-4394-A4A5-2F7CCF6BC2C3@xxxxxxxxxxxxxxxx
> To allow a domain user access to a local workstation, does the user have
to
> be added to the workstation explicitly, even if the user has domain admin
> priveleges?
>
> Under what circumstances does the trust relationship between the
workstation
> and the primary domain fail?
>


.

Relevant Pages

  • Re: Adding new domain user to workstation
    ... > failure, connectivity issue, etc., that user will be denied network access ... > By default, when a workstation joins an AD domain, the domain administrators ... > users group is added to the local machine users group. ...
    (microsoft.public.windows.server.general)
  • Re: File permissions
    ... The user logon server is a workstation and we have added user to Remote ... desktop users group and local users group .Our requirement: ... desktop users group and local users group.The user should only have ...
    (microsoft.public.windows.server.active_directory)
  • RE: system error 1314 when logging on
    ... Please grant the privilege on the local machine ... logged in locally on the workstation and granted the privilege to the ... As his login script ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Workstation locked
    ... Can you log into the local machine as Local Administrator and configure ... which was locked by using serwer rules ... > access the workstation. ... > I triesd to do it by reinstaling windows. ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Second user on workstation
    ... If this workstation was brought into the domain after the OS was installed ... Log into the account with a domain administrator ... This will give them ADMINISTRATOR LEVEL ... the users or power users group if you don't want to give them local machine ...
    (microsoft.public.windows.server.sbs)