• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 320
  • Last Modified:

Administrator permissions


I am setting up a new 2003 domain. In NT4 if a user was a member of the "administrators" group they could do pretty much what the administrator could do (or that was my experience) - in 2003, even though I have added myself to the "Enterprise Administrators" group I have limited rights, i.e. I was logged on under my own name and tried to modify a shortcut on the local machine but was denied access - where do I set the level of access so that even though I am logged in under my name I will have full permissions?


  • 2
1 Solution
Lee W, MVPTechnology and Business Process AdvisorCommented:
Enterprise Admins should work for that.  But add yourself to Domain Admins as well.  The client computers must also have listed the domain admins group in their local administrators group.  By default this is the case, but people can modify it.
Lee W, MVPTechnology and Business Process AdvisorCommented:
Of course, you should be aware of the RunAs service.  It's never a good idea to be logged in as an admin for everyday use.  You can do things by running things you need admin access to with the runas service.  Running constantly as an admin on your machine is a security risk with Viruses, Spyware, and Adware.  Doing so as a Domain or worse Enterprise Admin, you expose the entire network to this risk.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now