Re: Admin Rights on Client

From: Ricky Morris [MSFT] (rickym_at_online.microsoft.com)
Date: 08/22/04 

Date: Sun, 22 Aug 2004 01:11:32 GMT

Chip:

Log in to the client as the local Administrator and password, set the domain window to the machine's name before clicking OK.
Open the Computer Management Console.
Expand Local Users and Groups.
Click on Groups.
Double-Click on Administrators
Click on the Add Button.
Click on the Locations Button to select the domain if it is not already selected. You will be prompted to provide your domain admin
credentials to allow access to the AD.
Select Domain Admins, add the group to the Local Administrator's group.
Log off as the local Administrator.
Log on as a Domain Admin.

Best Regards,

Ricky Morris
Microsoft Small Business Server Support
This posting is provided "AS IS" with no warranties, and confers no rights.

Newsgroups:
SBS v4.x : microsoft.public.backoffice.smallbiz
SBS 2000: microsoft.public.backoffice.smallbiz2000
SBS 2003: microsoft.public.windows.server.sbs

--------------------
Reply-To: "ChipW" <Chip@del.ovisonline.com>
From: "ChipW" <Chip@del.ovisonline.com>
References: <e623Xk9gEHA.216@tk2msftngp13.phx.gbl> <#pCuts9gEHA.3932@TK2MSFTNGP09.phx.gbl>
Subject: Re: Admin Rights on Client
Date: Mon, 16 Aug 2004 18:10:03 -0400
Lines: 39
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-RFC2646: Format=Flowed; Response
Message-ID: <u9iY529gEHA.216@tk2msftngp13.phx.gbl>
Newsgroups: microsoft.public.windows.server.sbs
NNTP-Posting-Host: 216.30.212.253
Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.sbs:97627
X-Tomcat-NG: microsoft.public.windows.server.sbs

That's the way I had it setup too. I'm not sure exactly what I deleted,
because now I can't get in to check, but obviously was something
significant. Trying from the server control panel is the first thing I
tried, but alas, all I got was a red X. The local user never got the admin
rights on the local machine, now I don't either.

Stuck
Chip

"Dave Nickason [SBS MVP]" <gwdibble@NOSPAM.frontiernet.net> wrote in message
news:%23pCuts9gEHA.3932@TK2MSFTNGP09.phx.gbl...
> Is your account in the domain admins group? If so, you should be able to
> just log in and change it back. Or have the user you just gave local
> admin rights do it.
>
> You can also open the manage computer snap-in from a different computer or
> the SBS, connect to the desktop, go to local users and groups, and add
> your account back into the Administrators group.
>
> This may be a security risk for some reason, but I always set the
> workstations' local administrator account with the same password as the
> domain admin account to protect against this type of problem.
>
>
> "ChipW" <Chip@del.ovisonline.com> wrote in message
> news:e623Xk9gEHA.216@tk2msftngp13.phx.gbl...
>> OK, So this is was the dumb ass move of the day!
>> In trying to change the users account to have Admin rights on the local
>> XPpro client box, I accidentally deleted my admin rights to the client!
>> Any way around this? A secure OS can sometimes be a double edged
>> sword.... I locked my keys in the car and now the lock disappeared!
>>
>> Thanks
>> Chip
>>
>
>