Solved

What is special about the account "Administrator" in a domain except the groups it belongs to?

Posted on 2004-04-29
2
318 Views
Last Modified: 2010-04-13
I can get some services (ipswtich.com-Imail mail services) to run correctly when startet under the "Administrator" account of our domain. They run on a domain controller. These services need access to login information because the ADS-accounts are used for login into the web mail interface. I created an account "WebmailUser" which is in every group the administrator is in (Administrators, Domain-Admins...). Still the authentification with ADS login credentials in the web interface works only if I use the "Administrator" account. What is wrong? I don't want to use the administrator.
0
Comment
Question by:timan72
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 16

Accepted Solution

by:
JamesDS earned 500 total points
ID: 10946993
timan72
The administrator is not just a member of groups, it also has certain additional rights like "logon as a service" in your case these rights are conferred with Group Policies

Look in your Default Domain Controller group policy and your Default Domain Policy at the Windows Settings\Security Settings section for the rights you need to apply to your WebMailUser account.

I would start with "log on as a service" and "log on locally"

Cheers

JamesDS
0
 
LVL 7

Expert Comment

by:corneliup
ID: 10947527
From the workstation point of view (windows help system) :
"The Administrator account is the one you use when you first set up a workstation or member server. You use this account before you create an account for yourself. The Administrator account is a member of the Administrators group on the workstation or member server.

The Administrator account can never be deleted, disabled, or removed from the Administrators local group, ensuring that you never lock yourself out of the computer by deleting or disabling all the administrative accounts. This feature sets the Administrator account apart from other members of the Administrators local group."

0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
The goal of this blog is to: > note what has impeded us from reaching effective life on-call > provide 3 steps to mastering life on-call > highlight what will be achieved with effective life on-call
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question