Solved

Setting Admin rights for a User on workstation only

Posted on 2004-10-08
15
342 Views
Last Modified: 2010-03-18
I have an application that requires the User to have Admin rights on his computer.  Actually the tech support person for the software said I had to give them Admin rights on the network.......obviously I didn't want to do that.  I have done what I know about giving them Admin rights to the local workstation, and every place I check, it shows he does have them.  However, when I try to test his Admin rights, I always get a message telling me this user doesn't have enough rights.  I have even gone into Active Directory, and in "Properties" under "Account", gave him the permission to LOG IN to his "computer name".  I have been fooling with this for 2 days now, and cannot figure out what I am doing wrong.   Please help!!!!
0
Comment
Question by:charris955
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 5
  • 2
15 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 12261864
Hi charris955,
You need to make sure that this user is a member of the local "Administrators" group.

How you do this will depend on the OS.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261879
In Win XP:
Right-click My Computer
Manage
Navigate to "Local Users & Groups" > Groups

You'll see a group called "Adminstrators".  Open that up and add the user's account in there.
You can add the user's domain accout so that they simply log into the PC as normal, but have admin rights over the PC.
0
 

Author Comment

by:charris955
ID: 12261880
Windows OS, and he is a member of the Administrators group.
0
Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

 

Author Comment

by:charris955
ID: 12261899
scampgb

that is exactly what I did.......still doesn't have admin rights
0
 

Author Comment

by:charris955
ID: 12261931
Do you have anymore suggestions?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261933
Erm - that doesn't make much sense...

Just to check:
You've added the user's Domain account into the local "Administrators" group on the PC
You've got the user to log out and back in again
You're trying to install the software and it says they're not an administrator?

0
 

Author Comment

by:charris955
ID: 12261960
Yes, I right clicked on My Computer, then Manage.  Under Groups his user name is there, and under users he is showing to be a member of the Admin Group.
Yes, I have logged him out and back in many times, but he is definitely getting Administrative rights.  Can't even delete a shortcut icon when he is logged in.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262022
OK, can you please go to a command prompt on the PC and type:
net user <username> /DOMAIN

where <username> is the name of the user.
It should display what local groups that user is a member of.  Does it say that they're a member of Administrators?
Also - are you sure the user is logging on to the PC with their domain account, not a local one?
0
 

Author Comment

by:charris955
ID: 12262071
I am logged on his computer right now as myself, so I can't do the "net user" command without logging out, and loosing you, but if I remember correctly I did that yesterday and I believe it did show that he was a member of Admin.

Your question about logging on to the PC with their domain account, not a local one.  I don't think it matters which way he is logged in.  There are two options when he loggs in, and one us using domain name as his "machine name", and the other is to log onto our network domain.  Normally I am loggin him into the network domain, but I did try at one point just logging him in to his machine to install the software, and was still unsucessfull.  Is this the answer you were looking for?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262129
charris955:
> There are two options when he loggs in, and one us using domain name
> as his "machine name", and the other is to log onto our network domain.

Right - each one of those is actually a different account, and could explain some of the confusion.

You're best making sure that he uses his domain account to log in, and that it's the domain account thats a member of the Local "Administrators" group on the PC.
I suggest that you do the "net user" test again - just to make sure.

If that shows that he's a member of the local admin group, can you please let me know exactly what error you get when you try to do an administrative task?
0
 

Author Comment

by:charris955
ID: 12262168
OK - will do, and when I log back on I will come back to this site, and give you the results.
0
 

Author Comment

by:charris955
ID: 12262427
scampgb

i didn't log in as the user yet and try to do an install, because I thought that maybe the following information would help you.
When I did a net user <username>  it showed : Local Group Membership - Administrators
and it showed Global Group Membership: None

Then when I did a net use <username> /domain it showed:
Local Group Membership:   was blank
Global Group Membership:  Domain Users, Office, World, Project Managers

Does this tell you anything?
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 500 total points
ID: 12262707
1. log out and log in as the domain administrator
2. In control panel, double-click "users and passwords"
3. Delete all references to the user
4. Create a new instance of the user with your his username and the network domain (NT NetBIOS version, not DNS/FQDN)
5. Select "Other".  Administrators should be selected by default

now log out and log in as the user attaching to the network domain, and see what happens
0
 

Author Comment

by:charris955
ID: 12262927
Woohooooo !!!!  That worked and also cleared up another problem I was having with printing.  Thanks so much.
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12262953
ayyyyy. no problem.  glad to help out.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question