Solved

Setting Admin rights for a User on workstation only

Posted on 2004-10-08
15
339 Views
Last Modified: 2010-03-18
I have an application that requires the User to have Admin rights on his computer.  Actually the tech support person for the software said I had to give them Admin rights on the network.......obviously I didn't want to do that.  I have done what I know about giving them Admin rights to the local workstation, and every place I check, it shows he does have them.  However, when I try to test his Admin rights, I always get a message telling me this user doesn't have enough rights.  I have even gone into Active Directory, and in "Properties" under "Account", gave him the permission to LOG IN to his "computer name".  I have been fooling with this for 2 days now, and cannot figure out what I am doing wrong.   Please help!!!!
0
Comment
Question by:charris955
  • 8
  • 5
  • 2
15 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 12261864
Hi charris955,
You need to make sure that this user is a member of the local "Administrators" group.

How you do this will depend on the OS.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261879
In Win XP:
Right-click My Computer
Manage
Navigate to "Local Users & Groups" > Groups

You'll see a group called "Adminstrators".  Open that up and add the user's account in there.
You can add the user's domain accout so that they simply log into the PC as normal, but have admin rights over the PC.
0
 

Author Comment

by:charris955
ID: 12261880
Windows OS, and he is a member of the Administrators group.
0
 

Author Comment

by:charris955
ID: 12261899
scampgb

that is exactly what I did.......still doesn't have admin rights
0
 

Author Comment

by:charris955
ID: 12261931
Do you have anymore suggestions?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261933
Erm - that doesn't make much sense...

Just to check:
You've added the user's Domain account into the local "Administrators" group on the PC
You've got the user to log out and back in again
You're trying to install the software and it says they're not an administrator?

0
 

Author Comment

by:charris955
ID: 12261960
Yes, I right clicked on My Computer, then Manage.  Under Groups his user name is there, and under users he is showing to be a member of the Admin Group.
Yes, I have logged him out and back in many times, but he is definitely getting Administrative rights.  Can't even delete a shortcut icon when he is logged in.
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 15

Expert Comment

by:scampgb
ID: 12262022
OK, can you please go to a command prompt on the PC and type:
net user <username> /DOMAIN

where <username> is the name of the user.
It should display what local groups that user is a member of.  Does it say that they're a member of Administrators?
Also - are you sure the user is logging on to the PC with their domain account, not a local one?
0
 

Author Comment

by:charris955
ID: 12262071
I am logged on his computer right now as myself, so I can't do the "net user" command without logging out, and loosing you, but if I remember correctly I did that yesterday and I believe it did show that he was a member of Admin.

Your question about logging on to the PC with their domain account, not a local one.  I don't think it matters which way he is logged in.  There are two options when he loggs in, and one us using domain name as his "machine name", and the other is to log onto our network domain.  Normally I am loggin him into the network domain, but I did try at one point just logging him in to his machine to install the software, and was still unsucessfull.  Is this the answer you were looking for?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262129
charris955:
> There are two options when he loggs in, and one us using domain name
> as his "machine name", and the other is to log onto our network domain.

Right - each one of those is actually a different account, and could explain some of the confusion.

You're best making sure that he uses his domain account to log in, and that it's the domain account thats a member of the Local "Administrators" group on the PC.
I suggest that you do the "net user" test again - just to make sure.

If that shows that he's a member of the local admin group, can you please let me know exactly what error you get when you try to do an administrative task?
0
 

Author Comment

by:charris955
ID: 12262168
OK - will do, and when I log back on I will come back to this site, and give you the results.
0
 

Author Comment

by:charris955
ID: 12262427
scampgb

i didn't log in as the user yet and try to do an install, because I thought that maybe the following information would help you.
When I did a net user <username>  it showed : Local Group Membership - Administrators
and it showed Global Group Membership: None

Then when I did a net use <username> /domain it showed:
Local Group Membership:   was blank
Global Group Membership:  Domain Users, Office, World, Project Managers

Does this tell you anything?
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 500 total points
ID: 12262707
1. log out and log in as the domain administrator
2. In control panel, double-click "users and passwords"
3. Delete all references to the user
4. Create a new instance of the user with your his username and the network domain (NT NetBIOS version, not DNS/FQDN)
5. Select "Other".  Administrators should be selected by default

now log out and log in as the user attaching to the network domain, and see what happens
0
 

Author Comment

by:charris955
ID: 12262927
Woohooooo !!!!  That worked and also cleared up another problem I was having with printing.  Thanks so much.
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12262953
ayyyyy. no problem.  glad to help out.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
The Need In an Active Directory enviroment, the PDC emulator provide time synchronization for the domain. This is important since Active Directory uses Kerberos for authentication.  By default, if the time difference between systems is off by more …
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Hi friends,  in this video  I'll show you how new windows 10 user can learn the using of windows 10. Thank you.

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now