Re: Add domain user to Local Administrators Group on a workstation



In news:F9B5C1B6-3FD9-4341-BC9B-B6639E00B4F3@xxxxxxxxxxxxx,
Curt Winter <CurtWinter@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
ok I have set-up a brand new Windows 2003 R2 AD, it is running DNS.

When I log on with the DOMAIN ADMINISTRATOR account on any of the
workstation in the domain and try and add a domain user to the local
Administrators Group, it does not show me the domain or allow me to
add users from the domain. On the comuters properties it shows the
machine as on the domain. I can attach to and user Domain resources,
IE printers, shared folders. But it only shows me local computer
users and groups.

You ought to be able to change the context to the domain, from the local
workstation, within that dialog box. Is your internal DNS set up properly?

Note - it might be easier to do what you're doing centrally, either via
restricted groups & group policy, or even by running a startup script with

net localgroup administrators domain\domaingroup /add

or something like it.


In another windows 2000 AD domain I manage I go in a regularly add
domain users into the local computer groups without issue.

Is there some policy I must change in Server 2003 to accomplish this?
is this now locked down my microsoft and something I have to open up
to be able to do?

Any help would be appriciated.

Thank you.

Curt Winter


.

Relevant Pages

  • Re: SBS 2003 Premium Setup of end users.
    ... local machine Administrators. ... particular workstation remove them from the local Admin group on that ... After the initial setup, those permissions are not needed and the ... computer which is the current Workstation1 unit. ...
    (microsoft.public.windows.server.sbs)
  • Re: Must all users be administrators?
    ... What I am upset about is the extensive use of the administrators ... group on the local workstation. ... > permissions to control, just read permissions. ... If it's a folder, you can ...
    (microsoft.public.windows.server.sbs)
  • Re: SBS 2003 Premium Setup of end users.
    ... In the Local Users & Groups | Groups | Administrators ... I saw an entry for domain users and I deleted it. ... SBS needs a user to have local admin permissions on the workstation to ... That hard drive currently resides on the Workstation1 unit as a spare ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to add domain user or groups
    ... Check the DNS settings on an affected workstation. ... administrators cannot perform windows update except if logged in as ... That said, since you've got AD, why do this at the workstation anyway? ...
    (microsoft.public.windowsxp.security_admin)
  • Domain Admins cant manage computers
    ... For some reason I am having some bizard security problem ... computer and connect to the destination workstation, ... properties of group Administrators on computer XXX: ... Of course my account is a member of Domain Admins, ...
    (microsoft.public.win2000.security)