Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Administrator permissions

Posted on 2004-10-27
Medium Priority
Last Modified: 2010-04-11

I am setting up a new 2003 domain. In NT4 if a user was a member of the "administrators" group they could do pretty much what the administrator could do (or that was my experience) - in 2003, even though I have added myself to the "Enterprise Administrators" group I have limited rights, i.e. I was logged on under my own name and tried to modify a shortcut on the local machine but was denied access - where do I set the level of access so that even though I am logged in under my name I will have full permissions?


Question by:jonathanr
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
LVL 96

Expert Comment

by:Lee W, MVP
ID: 12430068
Enterprise Admins should work for that.  But add yourself to Domain Admins as well.  The client computers must also have listed the domain admins group in their local administrators group.  By default this is the case, but people can modify it.
LVL 96

Accepted Solution

Lee W, MVP earned 200 total points
ID: 12430081
Of course, you should be aware of the RunAs service.  It's never a good idea to be logged in as an admin for everyday use.  You can do things by running things you need admin access to with the runas service.  Running constantly as an admin on your machine is a security risk with Viruses, Spyware, and Adware.  Doing so as a Domain or worse Enterprise Admin, you expose the entire network to this risk.

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What monsters are hiding in your child's room? In this article I will share with you a tech horror story that could happen to anyone, along with some tips on how you can prevent it from happening to you.
Let's take a look into the basics of ransomware—how it spreads, how it can hurt us, and why a disaster recovery plan is important.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

610 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question