Re: what kind of rights to disjoin machine from domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Its a windows xp machine on the domain that I want to put into workgroup
mode. Why do I need domain admin rights for that?
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news:ff16fb6622d988cb9c44cea08f2d@xxxxxxxxxxxxxxxxxxxxxxx
Hello joey,

Yes. And if you like to remove the account form the domain, domain admin
rights are needed or delegated control for non-admins.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and
confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

what kind of local rights doesa user need to disjoin a machine from
domain and put into workgroup?

Does it "have" to be local admin?





.



Relevant Pages

  • Re: The following updates were not installed
    ... >> The user rights that are required by Update.exe ... >>> Administrator of this local machine. ... > and not the 'domain-level settings'? ... you would have to log on as a Domain Admin in order to do that (again, ...
    (microsoft.public.windowsupdate)
  • Re: Domian Local into Domain Admins Group
    ... As the 'Domain Admin' group is a GG, it can only contain members from the ... And you are correct that you cannot add a Local Group to a Global Group, ... you then provide permissions to the Domain Local Group. ... permissions or rights you give the Domain Local Group (or that has them by ...
    (microsoft.public.windows.server.active_directory)
  • Re: Admin Acct
    ... I understand your co. position on security. ... > SMS without Domain Admin rights. ... >> wants to use advanced security, local admin rights and no domain admin ...
    (microsoft.public.sms.admin)
  • Re: Service accounts best practices
    ... > Thanks for the war story Joe. ... >> generic Domain Admin IDs that were known to an unknown number of people ... >> with DA rights. ... >> wouldn't be run on the domain controllers and they weren't. ...
    (microsoft.public.win2000.security)
  • Re: SQL service accounts
    ... do not give Domain admin rights. ... If he needs additional rights, he should provide the minimum needed permissions and then you can reconfigure the security for the normal accounts. ... i have a SQL DBA who is insistint on sticking SQL AD ... service accounts in the Domain Admins group. ...
    (microsoft.public.windows.server.active_directory)