Re: Administrative Rights Installation Issue

From: Dave Leonardi (cyberfrost100_at_yahoo.com)
Date: 05/07/04


Date: Fri, 7 May 2004 14:41:53 -0400

Thanks Phillip,

            I see where you mean that Domain Admins becomes part of the
Admin Local Group upon joining the domain. What about the domain user itself
should they be made part of the admin group?. I just joined the domain on
one machine and I did see the local administrator and Domain Admins group
created under the Local Administrators Group.

As far as an example for software installs with admin rights. I deployed IE6
using symantec packager to many machines. The deployment went great with the
exception of reboot to finish the installation. It was asking for
administrative rights to finish the install upon. I had to logon as my self
to finish it for them. When it pushed the deployment across the wire it
asked for authentication, which was no problem. It's the local install that
I experience problems.

Dave Leonardi

"Phillip Windell" <@.> wrote in message
news:uwUiKmENEHA.3420@TK2MSFTNGP11.phx.gbl...
> "Dave Leonardi" <cyberfrost100@yahoo.com> wrote in message
> news:uoz5%23VENEHA.3012@tk2msftngp13.phx.gbl...
> > in a Windows 2003 Domain. When you access Local Users and Groups, what
> > exactly does it mean when you make a domain admin account or domain user
> > account a member of the local administrator's group.
>
> It means you did something redundant. The Domain Admins group is already
> inside the Local Admins Group and the same for Domain Users & Local Users
> when the workstion is made a member of the Domain.
>
> > software installation reasons?. I know I could make them part of the
power
> > user's group, but how does this affect remote software installs?
>
> Some installs might work while others wouldn't with the Power Users. Win2k
> and especially XP is designed to not allow anyone other than an
> Administrator to install softeware, althouh a lot depends on the App you
are
> trying to install and what it actually tried to change or add on the
machine
> during the install.
>
> > concerning administrative software installs. I can't afford to make
> everyone
> > an admin in order to do silent installs without interaction.
>
> Hmm...not sure there, I never do any silent installs other than the Norton
> AV Client. Doesn't your silent install setup have some way to be set to
run
> under a particular user account (such as an Admin)? There are so many
> different methods, utilities, and techniques for silent installs that I
> really don't know what to say. I'm sure doing it via SMS Server & SMS
> Client is much differnt than doing it with batch files and commandline
> parameters.
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
>



Relevant Pages

  • Re: Multiple Databases - One Workgroup
    ... Created a password for the admin user, added a new user - NewAdmin ... > - added new user to the Admins group, and removed the admin user from ... secure.mdw is the workgroup that OlderDB was secured with! ... Unsecure all your secure mdb files. ...
    (microsoft.public.access.security)
  • Re: "Access Denied" to local machine mgmt console
    ... Admins group is automatically part of the workstation's Local Admin ... If not pointing to ONLY the internal DNS in all machines' IP ...
    (microsoft.public.win2000.active_directory)
  • Re: User in Admin Group Cant Modify Objects
    ... Access doesn't see you as being in the Admins Group - so you appear to be using the wrong mdw at the time you attempt this ... account to the other admin user's account. ... saying that I need admin permissions to ...
    (microsoft.public.access.security)
  • Re: suid bit files + securing FreeBSD (new program: LockDown)
    ... >> It could certainly be installed from the ports collection, ... > if an admin installs a port with suid files and forget to add them to ... We-ell, the admin ought not forget that, eh? ... write what you envision in a shell script. ...
    (FreeBSD-Security)
  • Re: Grant Administrative Access to a Domain Controller
    ... (you are doing all of this while logged in as an Domain Admin) ... Create an account and allow them full ... at top level which means for lower level permissions are inherited. ... Login, start LDP, start the DN of the Domain Admins group, ...
    (microsoft.public.windows.server.active_directory)