Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.
Add domain user to local group
Name: Lily-Tian Date: June 11, 2004 at 03:14:48 Pacific OS: Windows XP CPU/Ram: PIII / 380M
Comment:
I am a memeber of Domain Admins group. As Glen said, the memebers of this group are added into the local Administrators group.
But when I log in using the domain user account, I still don't have the full access right as a local administrator. But when I use another local account, which belongs to the local Administrators group, I have full access.
Name: Jeruvy Date: June 11, 2004 at 08:21:57 Pacific
Reply:
The PC has them defined as separate groups with separate policies. Usually Group settings override local settings, but not when there are two sets of (nearly identical) permissions.
HTH,
J. j e r u v y a t y a h o o d o t c o m
0
Response Number 2
Name: Lily-Tian Date: June 11, 2004 at 09:15:21 Pacific
Reply:
What do you mean by "group setting overwrites local setting", here by "group" do you refer to domain or the local Adminstrator group?
Besides, some more information, although I am not sure whether it helps. I checked in registry /HKEY_LOCAL_MACHINE/Software/Microsoft/Windows NT/CurrentVersion/ProfileList
local user (belong to local Admistrator group) STATE = 0X0000 0100 (256)
domain user (belong to local Admistrator group) STATE = 0X0000 0110 (272)
Besides, I get to know that the last 10 means it's roaming. But do you think it influences the access right on the local maschine?
0
Response Number 3
Name: Jeruvy Date: June 11, 2004 at 14:19:08 Pacific
Reply:
There is local (the PC only) policy and there is group (the entire domain) policy.
Yes, group policy overides local policy, and if the profiles are stored on the DC then it will influence password checking, access to shares and AD, etc.
Sorry I wasn't very clear earlier. Hope that clears it up.
Summary: I wrote a logon vbscrip for adding some users to local administrator group and the logged on user to local power user group as belowe. The server is w2k server and active directory is installed. The ...
Summary: Some "Domain Users" in my company requires administrative privileges when they logon to ANY workstation. To add these users to the "Administrators" group of the target workstation, i found the follow...
Summary: I am trying to add another user to the administrator group in Windows XP. Apparently XP handles this differnetly. How do I add a user to the administrator group? Thanks ...
0 
