Re: Which permissions does domain administrators have on member se



First the server was installed as a member of a workgroup with the same name
as the domain.

Then it was joined to the domain through Control Panel - System - Computer
Name - Change.

Domain Admins are members of the local administrators group.


--
Regards,
Niels P.


"Lanwench [MVP - Exchange]" wrote:

In news:F78BF409-6DBA-4890-B6D0-ED8F89D80E45@xxxxxxxxxxxxx,
nikj_dk <nikjdk@xxxxxxxxxxxxxxxxxxxxxxxxx> typed:
I have added a 2003 St. server to a SBS2003 domain.

When I logon via TS to the member server as domain administrator, I
can map
a network drive, but I am not allowed to install an application from
the network drive.

To circumvent this, I logon on to the server via TS as a local
administrator, and I am allowed to install the application.

Why is this difference between local and domain administrator, and
how do I give the domain administrator permissions that equals the
local administrator?

Regards,
nikj_dk

Did you check the TS box's local Administrators group to make sure
DOMAIN\Administrators is a member thereof?

How'd you join the server to the domain?



.



Relevant Pages

  • Re: Setting a password on an AD account...
    ... I assume it's running in a restricted account right? ... You don't use SSL to bind, and as this runs from a server which is not a domain member (a ... this one fails when the current user is not an administrator on the DC. ...
    (microsoft.public.dotnet.languages.csharp)
  • RE: Administrator Logon failure
    ... you have no problem logging on to the server via a Remote Desktop ... The account you use is a member of Domain Power Users or Remote Operators ... By default in SBS Local Security Policy, SBS Remote Operators ... Remove these groups from administrator via a TS session. ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant remove user from administrator group
    ... try lusrmgr instead of usrmgr (if I am remembering NT4 correctly) ... where is name of a member local account or is ... Microsoft MVP (Windows Server: Security) ... > ONLY built in groups/users and the administrator password would be blank. ...
    (microsoft.public.windows.server.security)
  • Re: I shot my foot off almost and the Admin cant log into the server locally
    ... server. ... Keep a backup administrator id around. ... > By default the Administrator should be a member of these groups: ... > Administrators, Domain Admins, Domain Users, Enterprise Admins, Group ...
    (microsoft.public.windows.server.sbs)
  • Re: Login Script
    ... > If userA is a member of DOMAIN USERS and is a LOCAL ADMINISTRATOR to ... >>> a helpdesk person) to not be a member of "Domain Admins", ... LOCAL ADMINISTRATORS group with below code in FIGURE 1, ...
    (microsoft.public.win2000.active_directory)