Re: User login problems

From: Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] (sbradcpa_at_pacbell.net)
Date: 01/20/05 

Date: Thu, 20 Jan 2005 00:24:32 -0800

Read that -- it tell you how to add to the "Local" admin
http://groups-beta.google.com/group/microsoft.public.windows.msi/browse_thread/thread/3bfaf8d52a0f8650/2a6c9d07514c3d18?q=group+policy+local+administrator&_done=%2Fgroups%3Fq%3Dgroup+policy+local+administrator%26start%3D20%26hl%3Den%26lr%3D%26&_doneTitle=Back+to+Search&&d#2a6c9d07514c3d18

Make sure you havent' made them DOMAIN admins. And by default SBS2k3
makes you a local admin if you run the //connectcomputer wizard

Brenda wrote:
> I have a new install of windows 2003 small business server and have put all
> my users into the administrators groups as they need to be to run a program
> they have. I also have them in the administrator group in each local
> machine. Workstaions are running XP Pro. I continue to get a message that I
> am unable to run the application because I am not part of the administrators
> group. What am I missing? 

-- 
An open letter to the Security Community::
http://msmvps.com/bradley/archive/2004/12/12/23540.aspx

Relevant Pages

  • Re: Domain Admins removed from local admin group
    ... You can use restricted groups to fix the administrators on the local machines. ... Even if the user is local admin and removes the domain admins after the next GPO refresh they will be in again. ...
    (microsoft.public.windows.server.general)
  • Re: File Share security permission
    ... If the permissions are for domain admins and you are using a local admin ... Could anyone advise on general good practice security permissions to set ...
    (microsoft.public.windows.server.general)
  • RE: Automating Local Computer Admin Rights
    ... become a local admin of all PC's under the OU. ... section it has "This group is a member of:" and there is nothing in there.. ... say you add your 1 group you created to the administrators group on the local ... like the domain admins etc.. ...
    (microsoft.public.windows.server.active_directory)
  • Re: What is easier: to delegate or to use ACLs?
    ... >> But domain admins of one child domain cannot manage resources in another ... >> child domain or in the root domain. ... >> But administration of a local domains is done by local admin, ... >> their own regional domain. ...
    (microsoft.public.windows.server.active_directory)
  • Re: What is easier: to delegate or to use ACLs?
    ... >> But domain admins of one child domain cannot manage resources in another ... >> child domain or in the root domain. ... >> But administration of a local domains is done by local admin, ... >> their own regional domain. ...
    (microsoft.public.windows.server.active_directory)