Re: Local Machine Rights in a Domain



In news:OahddDuhFHA.3124@xxxxxxxxxxxxxxxxxxxx,
mcp6453 <mcp6453@xxxxxxxxxxxxx> typed:
> Would someone please give me a logical, step-by-step process for
> joining a new Windows 2000 or XP machine to a Windows 2K3 server and
> giving administrator rights to the local machine?

Two separate isues.

> It is no problem
> getting to the "Welcome to the *** Domain" screen.

?

> The problem is,
> when I try to add authenticated users or domain users to the local
> machine's administrator group, sometimes it works, and sometimes it
> doesn't.

What are you doing to try this, and who are you logged in as when you try?
You can't do this while logged into a local account on the workstation.

> I have some step or steps omitted or out of order. The
> process should not be as frustrating. Thanks.

1. Do not do this at all, unless absolutely positively necessary. Think of
Least User Privilege as your goal. Users should not have admin rights....too
much can go wrong.
2. You should be able to add Domain Users or any domain group to the local
Administrators group - and you should be able to do this remotely, even.
3. I create two AD groups - LocalAdmin and LocalPoweruser and add those
groups to every new machine I set up on a domain - that way, I have more
granular control over who gets what.


.

Relevant Pages

  • problem with logon on a windows 2000 or XP client machine
    ... I joined this machine to a windows 2000 domain. ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • Problem joing RHEL4 to Windows Server 2003 Active Directory using winbind
    ... I have been trying to get my RHEL4 client to join on a Windows domain, ... i still cant retrieve a list of domain users from the domain ... passwd: files winbind ...
    (RedHat)
  • Windows Media Player Crashes on Web Access with Domain User accoun
    ... Media player crashes with the text "Opening..." ... If I remove the user from the Power Users group, ... domain users unrestricted read/write access to C: ... Windows XP Pro SP2 with all updates applied, ...
    (microsoft.public.windowsmedia.player)
  • Samba Winbind Issue
    ... Domain Users properly using getent, but I have no problem using wbinfo. ... am trying to set permissions using setfacl and chown/chgrp for Windows ... Domain Accounts and get errors when attempting to resolve the Windows Domain ...
    (linux.redhat)
  • Samba Winbind Issue
    ... Domain Users properly using getent, but I have no problem using wbinfo. ... am trying to set permissions using setfacl and chown/chgrp for Windows ... Domain Accounts and get errors when attempting to resolve the Windows Domain ...
    (alt.os.linux)