Re: Security Groups question

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

OK, thanks.
"Cris Hanna [SBS-MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in message news:%23xoYtDcuIHA.5580@xxxxxxxxxxxxxxxxxxxxxxx
if his laptop was joined to the domain using connectcomputer wizard, then his user account should have been added to the local admin account

If it was not, you'll need to add the domain power users group to the Local Admin accounts on his laptop

I would also verify that the actual domain user account is in the local admin account

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Mike in Nebraska" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message news:%233MfI2buIHA.4528@xxxxxxxxxxxxxxxxxxxxxxx
So I would have to go to his laptop and change his group membership there, in addition to whyat I do on the serfver?
"Cris Hanna [SBS-MVP]" <crisnospamhanna@xxxxxxxxxxxxxxxxxxxxx> wrote in message news:uViTewbuIHA.2292@xxxxxxxxxxxxxxxxxxxxxxx
Because then you would have had to make Power Users a member of the local admin group on his laptop

Domain admins are by default members of the local admin group on the laptop

--
Cris Hanna [SBS-MVP]
-------------------------------------------------
Microsoft MVPs
Independent Experts (MVPs do not work for MS)
Real World Answers
---------------------------------------------------------
Please do not contact me directly regarding issues

"Mike in Nebraska" <Mike_Webb@xxxxxxxxxxxxxxxxx> wrote in message news:e3MC8DbuIHA.4848@xxxxxxxxxxxxxxxxxxxxxxx
Running SBS 2003 Premium.

I had placed the boss in the Domain Admins group (not my choice) for a few
days, and on Friday I removed him frm that group and added him to the Domain
Power Users group. At all times his Primary Group was Domain Users.

He told me that over the weekend he was unable to access any of his files on
his laptop, nor install programs. Pretty upset about it. I put him back
into the Domain Admins group and had him logoff/login so he could get to his
files.

Why did this happen? And what can I do to "fix" this?

--
Mike Webb
Platte River Whooping Crane Maintenance Trust, Inc.
a conservation non-profit (501 (c)(3)) organization
Wood River, NE

Relevant Pages

  • Re: Logging in without an account & password
    ... details and if I can't get in on the Local Admin account I ... >> This laptop is Win XP Pro by the way. ... >> confers no ...
    (microsoft.public.windowsxp.security_admin)
  • Re: DOMAIN_LOGIN PROBLEM
    ... Installed Vista on Laptop>>> Joined it to a Domain with Domain Admin ... made that perticular domain user the member of Local Admin group(Laptop Built ... No logon script per user or laptop is set. ...
    (microsoft.public.windows.vista.installation_setup)
  • Re: Security Groups question
    ... you'll need to add the domain power users group to the Local Admin accounts on his laptop ... I would also verify that the actual domain user account is in the local admin account ... Microsoft MVPs ...
    (microsoft.public.windows.server.sbs)
  • Re: Password issue....Locked out
    ... If your laptop belonged to a domain, and you changed it to workgroup, you've ... the reasons why most admins do not add domain users to the local admin ... Robert Moskovitz wrote: ... > password when logging this laptop in at the office. ...
    (microsoft.public.win2000.security)
  • Re: i screwed up
    ... You can't really fix it. ... Even if you manage to crack the local admin ... grant laptop users' accounts this privilege - it happens all the time... ...
    (microsoft.public.win2000.security)