Re: need local admin rights with domain login

Tech-Archive recommends: Fix windows errors by optimizing your registry

Hi,

Thank you for posting here.

I appreciate Joe's detailed input on this issue.

To add a user into the local machine, you must be the member of the Power
Users group who created the account or a member of the Administrators group
on the local computer, or you must have been delegated the appropriate
authority. If the computer is joined to a domain, members of the Domain
Admins group might be able to perform this procedure.

If you have any other concerns or need more help, please feel free to let
me know.

Have a nice day!

Best Regards,

Chace Zhang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
| Date: Wed, 06 Sep 2006 21:09:14 +0100
| From: Joe <joe@xxxxxxxxxxxxxx>
| User-Agent: Thunderbird 1.5.0.5 (X11/20060812)
| MIME-Version: 1.0
| Subject: Re: need local admin rights with domain login
| References: <F733CE5E-30E5-4BFD-8570-B74503A9DA54@xxxxxxxxxxxxx>
| In-Reply-To: <F733CE5E-30E5-4BFD-8570-B74503A9DA54@xxxxxxxxxxxxx>
| Content-Type: text/plain; charset=ISO-8859-1; format=flowed
| Content-Transfer-Encoding: 7bit
| Message-ID: <#HtrUBf0GHA.4972@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: jretradingltd.demon.co.uk 80.177.211.93
| Lines: 1
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:295714
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| comfuted wrote:
| > One workstation on my small network has a couple of old programs that
will
| > not run unless the user has admin rights. I have set up the user to log
in to
| > our domain as a user. How do I give him admin rights on his own machine?
|
| Logon to the workstation as domain admin, go to Administrative Tools,
| Computer Management, Local Users and Groups, Groups. Add the user to
| Administrators. Actually, it's worth trying Power Users first, as this
| isn't quite as dangerous as Admins, and may be enough.
|
| If they're that old, it's possible that the programs only require
| write permissions in their own working areas. It would be safer to
| make their directories (and all subdirectories and files) writable
| by this user. Use Windows Explorer as domain admin, Properties then
| Security. If they still exist, ask the software publisher what
| permissions are needed. It gets a bit tedious if you also have to
| change registry key permissions.
|

.

Relevant Pages

  • Re: I excluded myself from administrators of a db
    ... There must always be at least one member of the Admins Group - Access won't let you remove all users from that group. ... So login as each user (maybe even the Admin User) until you find the one that is a member of the Admins Group. ... Is there a way to give the admin rights back? ...
    (microsoft.public.access.security)
  • Re: Permissions (EVERYONE POST TO THIS)
    ... Removing Admin rights from your users is the prudent thing to do. ... without the IT Administrator providing these services and applications. ... priveledes, and before you know it, you have lost control of your network. ...
    (microsoft.public.win2000.security)
  • Re: I turned off UAC
    ... The User Access Control (UAC) can detect rootkits before they install. ... escalated to admin rights, the escalation to full-admin rights only last for the moment of escalation to do the task, and then the admin user is returned to being a Standard user again with Standard user rights only, not admin rights. ... Malware or a virus can only run under the context of the user account that is using the computer. ...
    (microsoft.public.windows.vista.general)
  • RE: OWAAdmin issue
    ... newsgroup as below. ... The OWA Admin tool requires an SSL connection. ... It is recommended that you install the OWA Admin tool on a ...
    (microsoft.public.windows.server.sbs)
  • Re: XP & W2K server User rights need help
    ... accounts. ... This narrows the issue, since any admin ... > Here is another fact, this domain server had to be> replaced so a new one was created, in the old domain> server non of the users had accounts only the computers ... >>> Accounts in AD Power users with admin rights to local ...
    (microsoft.public.windowsxp.security_admin)