Solved

Setting Admin rights for a User on workstation only

Posted on 2004-10-08
15
343 Views
Last Modified: 2010-03-18
I have an application that requires the User to have Admin rights on his computer.  Actually the tech support person for the software said I had to give them Admin rights on the network.......obviously I didn't want to do that.  I have done what I know about giving them Admin rights to the local workstation, and every place I check, it shows he does have them.  However, when I try to test his Admin rights, I always get a message telling me this user doesn't have enough rights.  I have even gone into Active Directory, and in "Properties" under "Account", gave him the permission to LOG IN to his "computer name".  I have been fooling with this for 2 days now, and cannot figure out what I am doing wrong.   Please help!!!!
0
Comment
Question by:charris955
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 8
  • 5
  • 2
15 Comments
 
LVL 15

Expert Comment

by:scampgb
ID: 12261864
Hi charris955,
You need to make sure that this user is a member of the local "Administrators" group.

How you do this will depend on the OS.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261879
In Win XP:
Right-click My Computer
Manage
Navigate to "Local Users & Groups" > Groups

You'll see a group called "Adminstrators".  Open that up and add the user's account in there.
You can add the user's domain accout so that they simply log into the PC as normal, but have admin rights over the PC.
0
 

Author Comment

by:charris955
ID: 12261880
Windows OS, and he is a member of the Administrators group.
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 

Author Comment

by:charris955
ID: 12261899
scampgb

that is exactly what I did.......still doesn't have admin rights
0
 

Author Comment

by:charris955
ID: 12261931
Do you have anymore suggestions?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12261933
Erm - that doesn't make much sense...

Just to check:
You've added the user's Domain account into the local "Administrators" group on the PC
You've got the user to log out and back in again
You're trying to install the software and it says they're not an administrator?

0
 

Author Comment

by:charris955
ID: 12261960
Yes, I right clicked on My Computer, then Manage.  Under Groups his user name is there, and under users he is showing to be a member of the Admin Group.
Yes, I have logged him out and back in many times, but he is definitely getting Administrative rights.  Can't even delete a shortcut icon when he is logged in.
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262022
OK, can you please go to a command prompt on the PC and type:
net user <username> /DOMAIN

where <username> is the name of the user.
It should display what local groups that user is a member of.  Does it say that they're a member of Administrators?
Also - are you sure the user is logging on to the PC with their domain account, not a local one?
0
 

Author Comment

by:charris955
ID: 12262071
I am logged on his computer right now as myself, so I can't do the "net user" command without logging out, and loosing you, but if I remember correctly I did that yesterday and I believe it did show that he was a member of Admin.

Your question about logging on to the PC with their domain account, not a local one.  I don't think it matters which way he is logged in.  There are two options when he loggs in, and one us using domain name as his "machine name", and the other is to log onto our network domain.  Normally I am loggin him into the network domain, but I did try at one point just logging him in to his machine to install the software, and was still unsucessfull.  Is this the answer you were looking for?
0
 
LVL 15

Expert Comment

by:scampgb
ID: 12262129
charris955:
> There are two options when he loggs in, and one us using domain name
> as his "machine name", and the other is to log onto our network domain.

Right - each one of those is actually a different account, and could explain some of the confusion.

You're best making sure that he uses his domain account to log in, and that it's the domain account thats a member of the Local "Administrators" group on the PC.
I suggest that you do the "net user" test again - just to make sure.

If that shows that he's a member of the local admin group, can you please let me know exactly what error you get when you try to do an administrative task?
0
 

Author Comment

by:charris955
ID: 12262168
OK - will do, and when I log back on I will come back to this site, and give you the results.
0
 

Author Comment

by:charris955
ID: 12262427
scampgb

i didn't log in as the user yet and try to do an install, because I thought that maybe the following information would help you.
When I did a net user <username>  it showed : Local Group Membership - Administrators
and it showed Global Group Membership: None

Then when I did a net use <username> /domain it showed:
Local Group Membership:   was blank
Global Group Membership:  Domain Users, Office, World, Project Managers

Does this tell you anything?
0
 
LVL 15

Accepted Solution

by:
adamdrayer earned 500 total points
ID: 12262707
1. log out and log in as the domain administrator
2. In control panel, double-click "users and passwords"
3. Delete all references to the user
4. Create a new instance of the user with your his username and the network domain (NT NetBIOS version, not DNS/FQDN)
5. Select "Other".  Administrators should be selected by default

now log out and log in as the user attaching to the network domain, and see what happens
0
 

Author Comment

by:charris955
ID: 12262927
Woohooooo !!!!  That worked and also cleared up another problem I was having with printing.  Thanks so much.
0
 
LVL 15

Expert Comment

by:adamdrayer
ID: 12262953
ayyyyy. no problem.  glad to help out.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Nslookup is a command line driven utility supplied as part of most Windows operating systems that can reveal information related to domain names and the Internet Protocol (IP) addresses associated with them. In simple terms, it is a tool that can …
A common practice in small networks is making file sharing easy which works extremely well when intra-network security is not an issue. In essence, everyone, that is "Everyone", is given access to all of the shared files - often the entire C: drive …
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
In this brief tutorial Pawel from AdRem Software explains how you can quickly find out which services are running on your network, or what are the IP addresses of servers responsible for each service. Software used is freeware NetCrunch Tools (https…
Suggested Courses

615 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question