Computing.Net > Forums > Windows 2000 > Adding domain groups to local

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

Adding domain groups to local

Reply to Message Icon

Name: Jason
Date: November 5, 2002 at 08:10:10 Pacific
OS: Win 2k AS
CPU/Ram: Dual 2ghz / 2gb
Comment:

I have two related questions. We have just started migration to windows 2k server and I have a couple of questions. We were just peer to peer based before this.

1. How do I add a domain group to the local administrators group.

2. In windows 2000 all of our users already have local accounts that they use. Is there anyway to link their old local account to their new domain account, meaning that if they login into the domain as jsmith, they have all their settings just as they left them withough having to copy their old profile to the new directory?

Thanks



Sponsored Link
Ads by Google

Response Number 1
Name: zack
Date: November 5, 2002 at 09:16:06 Pacific
Reply:

1. In Computer Management console on Win2000 workstations, you can add the Domain Admin group to the Local Admin group then they will have local permissions.

2. If you create usernames and passwords on the server that are equal to the username and passwords on the local computer then copy their local profile from the local computer to server - they will have all their local settings when they log on.


0

Response Number 2
Name: Jason
Date: November 5, 2002 at 09:29:06 Pacific
Reply:

Thanks Zack,
#1 was right there under my nose the whole time.

As for #2, that makes sense, but most of the users log on locally as administrator, not as real names. I know, I know it's a bad bad thing, but I wasn't here then, so I claim no responsibility.

Jason


0

Response Number 3
Name: Jennifer
Date: November 5, 2002 at 10:44:20 Pacific
Reply:

Jason,

Zack's instructions are not completely accurate. First of all, do NOT allow users to login locally with the default Administrator account. You should rename that account and assign it a password that only your IT or computer support people know. The users' Domain Accounts can be added to the Local Admin group, but you should only do that if they absolutely MUST have Admin privileges. If it's a software access issue, you can change permissions in the registry for the particular software that requires elevated privileges. You may not have been there when everything was set up, but you're responsible now.

As for the profile issue, once the user logs in with a different account (ie Domain User) a new local profile is created. You would have to go to each machine (or SMS) and copy the old user profile to the newly created one. If you're using Roaming Profiles on your current Domain, you can copy the user settings directly from the current server to the new Profile share on the new server. However, if you're not currently using Roaming Profiles, the best thing to do is just copy the desktop icons from the current local login account to the newly created one. Going from a local login to a Domain login is an adjustment, and the users can at least have their desktop icons look the same.

Good luck.


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: Adding domain groups to local

adding domain users to Power Users www.computing.net/answers/windows-2000/adding-domain-users-to-power-users/40245.html

Adding NT-Domain groups to 2kpro cl www.computing.net/answers/windows-2000/adding-ntdomain-groups-to-2kpro-cl/58405.html

adding global group to local group www.computing.net/answers/windows-2000/adding-global-group-to-local-group/59092.html