Re: Login as local admin

thanks guys.

So if i basically ensure that my domain administrator account is a member of
the schema admins, and enterprise admins, and login using these credentials,
the service pack error i have been experiencing should be removed.

Appologies for the confusions between local and built in. From my
experiences IT (un)professionals are well know to use lots of terminology
interchangabley (whether right or wrong).

"kj" wrote:

The referenced article is correct. Note "built-in" and "local" are NOT the
same. The article does not reference "local" administrator (as far as I
could search).

If you choose to use an account other than the built-in administrator
account, then it must also be a member of the additional groups specified in
the article. Membership in Domain Admins alone is not sufficient.

There are other differences as well. I would recommend using the built-in
administrator (as does the article) account for this objective.

Hopefully, once and for all, "local" accounts are SAM based accounts on
workstations, member servers, workgroup machines, and the special account on
domain controllers accessable only durring active directory restore mode
operations.

--
/kj
"Andy Wolsten" <AndyWolsten@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:2E42EFAA-867F-4716-BEBD-9B3B0DBB198E@xxxxxxxxxxxxxxxx
Hi chaps, this is a very interesting discussion.

As i am trying to install SBS SP1, an error is displayed indicating that
the
current user must be a member of the Schema Admins and Enterprise Admins
groups, despite me being logged in as domain administrator account, hence
my
concern and questions about enabling the local administrator login. The
install then fails but indicates success. Result - unable to transition
pack

http://www.smallbizserver.net/Default.aspx?tabid=266&ArticleType=ArticleView&ArticleID=68&PageID=70

This document recomends the use of the built in administrator account.
Any advice would be greatly appreciated.

"kj" wrote:

"Joe" <joe@xxxxxxxxxxxxxx> wrote in message
news:e5bvcf$715$1$8302bc10@xxxxxxxxxxxxxxxxxxx
kj wrote:
"Joe" <joe@xxxxxxxxxxxxxx> wrote in message
news:e59ol1$oa2$1$8300dec7@xxxxxxxxxxxxxxxxxxx
kj wrote:
The "local administrator" of a SBS (or other AD domain controller)
server is *only* used durring active directory restore mode.

If you can log in normally using the domain administrator, then
describe in some detail what errors or results you are having
installing which service pack(s).

The smallbizserver SP1 install instructions emphasize the use of the
built-in administrator account. Domain admin isn't enough for that
job.

Could you provide some reference for that statement?

The SBS Domain Administrator ("Administrator") has *complete*
permisions
to the Operating System.


The SBS SP1 installation instructions provided by Susan, Mariette et al
on the smallbizserver website, or at least this was the case last year
when I last did it. I don't have a copy to hand, and I don't think it
is generally accessible now.

But I think we're at cross-purposes here. I am using the term 'domain
admin' as Microsoft does to mean accounts created after installation,
and I do not mean the SBS built-in administrator, the one set up during
installation. That is the one SP1 needs. So I'm told, and I didn't
really have the time to try it both ways, but a few posts like the
original one here suggest that it is true.

OK, The "Built-in" Administrator is;

1) different than the "local administrator" ( SAM based Administrator
used
ONLY (almost) for Active Directory Services Restore Mode).

2) Has capabilities above what other members of the "Domain Admins" get
by
default. Just look at some of the other groups that the "built-in"
Administrator is a member of for a glimpse.

/kj






.

Relevant Pages

  • Re: Windows Service - Event Log
    ... I didn't say the Administrator account. ... Administrators group on the local machine." ... I didn't advocate using a member of the Administrator's group; ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Login as local admin
    ... schema admins, enterprise admins and the other groups mentioned, but the ... installing SBS SP1. ... So if i basically ensure that my domain administrator account is a member ... The article does not reference "local" administrator (as far as I ...
    (microsoft.public.windows.server.sbs)
  • Re: Setting a password on an AD account...
    ... I assume it's running in a restricted account right? ... You don't use SSL to bind, and as this runs from a server which is not a domain member (a ... this one fails when the current user is not an administrator on the DC. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Login as local admin
    ... schema admins, enterprise admins and the other groups mentioned, but the ... So if i basically ensure that my domain administrator account is a member ... The article does not reference "local" administrator (as far as I ... As i am trying to install SBS SP1, ...
    (microsoft.public.windows.server.sbs)
  • Re: Upgrade SBS2000 to SBS2003
    ... Specify an account with Enterprise Administrator prrivileges to the ... The domain Administrator account should be a member of the Enterprise ... Enterprise Admins" error when you run the Windows Small Business ...
    (microsoft.public.backoffice.smallbiz2000)