Local-Admin without being Domain-Admin
Posted: Tue Jul 26, 2005 12:40 pm
When working with a windows domain controller (yuck!) it is highly unlikely that a lot of users should be domain-administrators.
BUT: For working with windows it is necessary to have at least Administrator-rights on the local machine on is working on.
Here's how to assign them (I always forget how, so finally I'm writing it down) - Windows 2k/XP:
Find the user-administration somewhere in the control panel:
- on W2kServer it's under: "controlpanel>administrative tools>computeradministration>local users and groups"
- On w2k/xp it's usually somewhere under "controlpanel>users>advanced"
Go to the group administration, right-click on the "Administrator" group and assign your domain user to it.
Important: Make sure that your user shows up in the Administrator-group list with the domain prefix. e.g.: "MYDOMAIN.HOME\me".
Sometimes there's a user with the same name stored locally, so it might happen to confuse them!
BUT: For working with windows it is necessary to have at least Administrator-rights on the local machine on is working on.
Here's how to assign them (I always forget how, so finally I'm writing it down) - Windows 2k/XP:
Find the user-administration somewhere in the control panel:
- on W2kServer it's under: "controlpanel>administrative tools>computeradministration>local users and groups"
- On w2k/xp it's usually somewhere under "controlpanel>users>advanced"
Go to the group administration, right-click on the "Administrator" group and assign your domain user to it.
Important: Make sure that your user shows up in the Administrator-group list with the domain prefix. e.g.: "MYDOMAIN.HOME\me".
Sometimes there's a user with the same name stored locally, so it might happen to confuse them!