Solved

Setting Admin rights for a User on workstation only

Posted on 2004-10-08
15
338 Views
Last Modified: 2010-03-18
I have an application that requires the User to have Admin rights on his computer.  Actually the tech support person for the software said I had to give them Admin rights on the network.......obviously I didn't want to do that.  I have done what I know about giving them Admin rights to the local workstation, and every place I check, it shows he does have them.  However, when I try to test his Admin rights, I always get a message telling me this user doesn't have enough rights.  I have even gone into Active Directory, and in "Properties" under "Account", gave him the permission to LOG IN to his "computer name".  I have been fooling with this for 2 days now, and cannot figure out what I am doing wrong.   Please help!!!!
0
Comment
Question by:charris955
  • 8
  • 5
  • 2
15 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 12261864
Hi charris955,
You need to make sure that this user is a member of the local "Administrators" group.

How you do this will depend on the OS.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261879
In Win XP:
Right-click My Computer
Manage
Navigate to "Local Users & Groups" > Groups

You'll see a group called "Adminstrators".  Open that up and add the user's account in there.
You can add the user's domain accout so that they simply log into the PC as normal, but have admin rights over the PC.
0
 

Author Comment

by:charris955
ID: 12261880
Windows OS, and he is a member of the Administrators group.
0
 

Author Comment

by:charris955
ID: 12261899
scampgb

that is exactly what I did.......still doesn't have admin rights
0
 

Author Comment

by:charris955
ID: 12261931
Do you have anymore suggestions?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261933
Erm - that doesn't make much sense...

Just to check:
You've added the user's Domain account into the local "Administrators" group on the PC
You've got the user to log out and back in again
You're trying to install the software and it says they're not an administrator?

0
 

Author Comment

by:charris955
ID: 12261960
Yes, I right clicked on My Computer, then Manage.  Under Groups his user name is there, and under users he is showing to be a member of the Admin Group.
Yes, I have logged him out and back in many times, but he is definitely getting Administrative rights.  Can't even delete a shortcut icon when he is logged in.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 15

Expert Comment

by:scampgb
ID: 12262022
OK, can you please go to a command prompt on the PC and type:
net user <username> /DOMAIN

where <username> is the name of the user.
It should display what local groups that user is a member of.  Does it say that they're a member of Administrators?
Also - are you sure the user is logging on to the PC with their domain account, not a local one?
0
 

Author Comment

by:charris955
ID: 12262071
I am logged on his computer right now as myself, so I can't do the "net user" command without logging out, and loosing you, but if I remember correctly I did that yesterday and I believe it did show that he was a member of Admin.

Your question about logging on to the PC with their domain account, not a local one.  I don't think it matters which way he is logged in.  There are two options when he loggs in, and one us using domain name as his "machine name", and the other is to log onto our network domain.  Normally I am loggin him into the network domain, but I did try at one point just logging him in to his machine to install the software, and was still unsucessfull.  Is this the answer you were looking for?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262129
charris955:
> There are two options when he loggs in, and one us using domain name
> as his "machine name", and the other is to log onto our network domain.

Right - each one of those is actually a different account, and could explain some of the confusion.

You're best making sure that he uses his domain account to log in, and that it's the domain account thats a member of the Local "Administrators" group on the PC.
I suggest that you do the "net user" test again - just to make sure.

If that shows that he's a member of the local admin group, can you please let me know exactly what error you get when you try to do an administrative task?
0
 

Author Comment

by:charris955
ID: 12262168
OK - will do, and when I log back on I will come back to this site, and give you the results.
0
 

Author Comment

by:charris955
ID: 12262427
scampgb

i didn't log in as the user yet and try to do an install, because I thought that maybe the following information would help you.
When I did a net user <username>  it showed : Local Group Membership - Administrators
and it showed Global Group Membership: None

Then when I did a net use <username> /domain it showed:
Local Group Membership:   was blank
Global Group Membership:  Domain Users, Office, World, Project Managers

Does this tell you anything?
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 500 total points
ID: 12262707
1. log out and log in as the domain administrator
2. In control panel, double-click "users and passwords"
3. Delete all references to the user
4. Create a new instance of the user with your his username and the network domain (NT NetBIOS version, not DNS/FQDN)
5. Select "Other".  Administrators should be selected by default

now log out and log in as the user attaching to the network domain, and see what happens
0
 

Author Comment

by:charris955
ID: 12262927
Woohooooo !!!!  That worked and also cleared up another problem I was having with printing.  Thanks so much.
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12262953
ayyyyy. no problem.  glad to help out.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
This video discusses moving either the default database or any database to a new volume.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now