Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Adding domain users to local admin
Name: kiwi_hk Date: May 10, 2006 at 08:03:00 Pacific OS: Windows XP pro CPU/Ram: 512
Comment:
Hi
We have a Windows 2003 server domain with client XP pro machine, when I login as a domain users, I am able to add domain users to the local admin group. A windows pops up and I usually enter admin and password of the domain, then I can choose which groups to add to the local admin, but I find I can just type in a domain user and achieve the same thing. I thought only domain admin can do this. The domain user only have power user rights for the local computer. Is there something I am doing wrong or need to change some security settings.
Name: Jennifer SUMN Date: May 10, 2006 at 08:11:37 Pacific
Reply:
How are you logging into the Machine? A local Admin account or Domain Admin account?
Life is more painless for those who are brainless.
0
Response Number 2
Name: kiwi_hk Date: May 10, 2006 at 17:33:18 Pacific
Reply:
I am logging in the client machine as a domain user only.
0
Response Number 3
Name: kiwi_hk Date: May 10, 2006 at 18:44:36 Pacific
Reply:
When I go into control panel/users I have to enter the admin password of the local machine because the domain user is a local power user only. After that, I can add domain users to the local admin group when windows ask me to login to the domain to find the groups I just use a domain users login to authorize this. Is this normal? shouldn't I need to be a domain admin before I can do this?. I have try also logging in locally as admin of the client machine, same issue, the difference is I don't need to login again as admin when I click on users in control panel.
0
Response Number 4
Name: Jennifer SUMN Date: May 11, 2006 at 05:57:45 Pacific
Reply:
You're authenticating with the Admin password.
Why not just login to the machine with your DA account and then add the Domain User account to the Local Admin Group? That would save time.
Life is more painless for those who are brainless.
0
Response Number 5
Name: kiwi_hk Date: May 11, 2006 at 18:46:19 Pacific
Reply:
I know, but I was thinking I normal domain user could add themself to the local admin
If a normal user could add themselves to the local admin group, they wouldn't be a normal user anymore would they? It would sort of defeat the purpose of having normal and admin users.
0
Response Number 7
Name: kiwi_hk Date: May 17, 2006 at 16:57:29 Pacific
Reply:
Maybe it's normal, if I login to the local machine as admin, then try to add a domain users to the local admin group is possible, because I am the admin of the local machine.
Summary: Okay so um, yeah. I want a certain number of users to be Admins of all the workstations and just "Users" to the servers and the DC's. So, I removed them from the Domain Admins group since I heard its ...
Summary: we have AD installed on win 2003 server. after computers were added to domain we tryed to add domain users to local admins (under local admin account). but this turns out to be impossible. combobox fo...
Summary: I have Server01 running Win2K3+SP1 with Active Directory Services and serving as domain controller for the Domain01. Server02 is also running Win2K3+SP1 std server edition and is configured as a stand...
0 
