RE: Local Accounts

Sorry cant remember if i added this or not, This is done on the CLient
machine not the SBS server

Matt

"-Draino-" wrote:

Hi all,

I have 3 PC's that at one time were all in the same workgroup. No server.
The users all accessed the PC's with local usernames and passwords. All 3
users had accounts on all 3 computers. All 3 users could log into any
computer with their username and password.

Now that a SBS2003 server has been added, all 3 users log on to the network.
All 3 users still use the same usernames and passwords that they had when
the computers were in a workgroup.

Because the users still have local computer accounts, the users are still
allowed to log into the computers locally. When I go to the user accounts I
see all 3 users with accounts on the "computer name"

If I delete the user and add them back and put there account with the
"domain name" they can no longer access the computer locally. It seems as
though I can do this for the Administrator account as well. My questions
are, would I be able to delete the admin account and add it back using the
"domain name" and if so how would anyone access that computer locally? Is it
as simple as just adding a new user and making them an administrator on the
"computer name"???

The reason I haven't tried this is because when you add a user the box says
"user name" and "domain name" there is no option for "computer name" and if
I get an error that say's "domain name does not exist" I wouldn't know how
to access that computer locally.

The other thing is what would happen if I just leave the computers the way
they are and I made a local user and administrator, would that user be an
administrator on that machine locally and a regular user on the domain?...I
assume so :)

Another question is after reading a response from Lanwench, I made those
users have access with "remote desktop" access on the local machine but as a
member of the domain. Would they not have remote access through RWW if I
made them admins locally as well?

What happens if I change an existing user, (that is only a regular user on
the domain), on the local machine, and give them admin rights to the domain?
Does their account get updated on the domain to administrator?

What are the pro and cons of users having access to their local machine?

Never thought there was so much to know about simple user accounts!!!!!!


Randy



--






For The Best Web Hosting Money Can Buy Go To:
http://www.serverpoint.com/1028.html


.

Relevant Pages

  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.security)
  • Re: password expiration policy for admin and system accounts ?
    ... > scheduled tasks that use various administrative accounts. ... > administrative account which starts several key exchange services. ... > Thus every time the exchange server was rebooted several exchange services ... >> JJ wrote:>>> Our auditors are objecting to our having Domain Administrator and domain>>> system accounts with passwords that never expire. ...
    (microsoft.public.win2000.security)
  • Re: Help setting up AD without MS exchange...please!
    ... It is not the AD installation that is a problem, ... It will provide you an easier management option from the administrator view, without going to any machine in the future, as you said yourself. ... AD relies on a functioning DNS setup and user accounts created in AD will, even if they have the same name as the now used local accounts, create a new user profile so basically the users will have to start reconfiguring there profile settings, display, shortcuts etc. etc. ... Windows Server 2003 on our "server", mostly a file and print server. ...
    (microsoft.public.windows.server.active_directory)
  • RE: Local Accounts
    ... domain user accounts administrators on the local machine. ... This will give them admin rights on the local machine ... though I can do this for the Administrator account as well. ...
    (microsoft.public.windows.server.sbs)
  • Re: 2003 server hangs at Applying Computer Settings - Cant login
    ... Or maybe the server was configured to auto-login the administrator -- and ... has always been catestrophic and requires reinstalling IIS. ... > accounts still loaded in memory, and therefore Exchange and other services ...
    (microsoft.public.windows.server.general)
Loading