Re: Local admin versus domain admin on windows 2008

As Dusko pointed out, with UAC there is a big difference between a user with administrator privilege and "the" administrator account.

"Dusko Savatovic" <nospam.savatovic@xxxxxxxxx> wrote in message news:#eRA277BJHA.2476@xxxxxxxxxxxxxxxxxxxxxxx
When you join computer to a domain, domain admins global group automaticaly becomes member of local administrators group, therefore giving local admin privileges to domain admins. Windows Server 2008 has same security enhancements as Vista, so you have UAC turned on by default. When you are logged on as domain admin, you should start privileged operation with "Run as administrator" option.

Dush

"BrianB" <BrianB@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:3F0FF25B-767A-451C-AC2B-519322630EF1@xxxxxxxxxxxxxxxx
We have several x32 2008 std servers that we are testing with. They belong
to the domain and the local administrators group contains the domain admins
group. We are moving an app from a 2003 server to a 2008 server. When
trying to install a custom service, we get an access denied error with a
domain admin account. The only account that will create the service is the
local admin.

Is there a way to give the domain admins the same privilages as the local
admin account?

Thanks,
Brian

.

Relevant Pages

  • Re: Administrator account / Domian Addmin rights
    ... There is no difference between one Domain Admins member ... sharing an empowered account between people, ... The best thing however is to not provide Domain Admins membership, ... Finally - every administrator should know that changing the password ...
    (microsoft.public.win2000.security)
  • Administrator and Domain Administrator
    ... We have 10,000+ users and have only two Domain Admins, ... with the domain administrator accounts password locked ... Having multiple people with access to this account ... when I go to enforce strong passwords across the domain. ...
    (microsoft.public.win2000.security)
  • Re: ADMT v3 - cant migrate SID history
    ... the administrator account in the target domain, and that I have added the ... > add target domain admins to source administrators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Lost admin priviledges
    ... from an account that already has admin privilege. ... (eg, Administrator) ...
    (microsoft.public.security)
  • Re: Disk Management
    ... You can't delete the built in administrator account. ... reset the password on it being a domain administrator if the domain admins ... > in the local Administrators group on the server. ...
    (microsoft.public.win2000.security)