Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Click here to start participating now! Also, check out the New User Guide.
Removing users from Domain Admins Group
Name: Dwain Date: October 20, 2000 at 07:17:23 Pacific
Comment:
All, I am logged into my PDC as Administrator when I try to remove a user from the Domain Admins Global Group I get the following error message. " This operation is not allowed on this special group. PLEASE HELP!!!!
Name: TopGun Date: October 20, 2000 at 08:10:24 Pacific
Reply:
Search Microsoft knowledge base for article Q119743. It says that those members you are trying to delete have that group as their primary group.
Hope this helps...
0
Response Number 2
Name: Steve Date: October 20, 2000 at 14:42:17 Pacific
Reply:
Each user must be a member of at least one group. If the user you are trying to remove from the admin group does not belong to another group you will be denied from removing them. You can add the user into another group(something like authenticated users) and set that as there primary group. Then you can remove them from the admin group. Or you can delete that user account and recreate it as a member of a new group. REMEMBER- each user has a unique SID number that is created when the account is created. So if you delete a user account they have lost all rights/permissions.
Summary: Or you could grant this user an additional user right from the user managers list of 'install dll's'. Actually, what I do in these cases is add the user to the admin list, log the user out nad b...
Summary: You need administrative rights to install software. If they are not part of the local admin group and not part of a domain admin group you have nothing to worry about. ...
Summary: Hello, The best way to handle users and their permissions is via the use of groups. Just put all the users you want to give administrator rights into the Domain Admin group on the PDC. You can easily ...