?
Solved

need local admin rights on a member server.

Posted on 2007-10-06
16
Medium Priority
?
188 Views
Last Modified: 2010-04-18
I'm trying to install a new program on a member server.  I've added a new user which is a member of the Administrators group.  When I log on to the server as the new user and start the install I get "you currently do not have local admin rights on this machine"  How do I fix this.  I need a RUSH answer.

Thanks,

J.R.
0
Comment
Question by:J.R. Sitman
  • 9
  • 7
16 Comments
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028354
Do you have any Group Policy Objects configured on the container containing this server?  I'm thinking specifically of a Restricted Groups policy that may be removing your newly-configured user from the Administrators group in the background.  Run a Resultant Set of Policy report against the user/computer combination in question.

Only other thing that immediately comes to mind would be the application itself - some are stupidy-coded and check for the actual Administrator account, not just an account with administrative rights.
0
 

Author Comment

by:J.R. Sitman
ID: 20028382
When I run RSOP on the user all I get is Default domain policy and on the computer, local group policy has a red "X", then is has default domain policy and WSUS Update.

The tutorial for the program I'm installing states to add a new user.  I'm not sure if I can use the existing Administrators account.
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028392
If you type 'net localgroup administrators', does the newly-created user appear in the membership listing?
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:J.R. Sitman
ID: 20028395
Type it where?
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028399
This is a command prompt utility. Enter it at the Windows command prompt.
0
 

Author Comment

by:J.R. Sitman
ID: 20028404
nope only Administrator
0
 

Author Comment

by:J.R. Sitman
ID: 20028407
If I type the command from the DC, the new account does display
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028410
> "nope only Administrator"

This means that the newly-created user is not a member of the Administrators group on the member server. What steps did you take to add this user to the local Administrators group?
0
 

Author Comment

by:J.R. Sitman
ID: 20028412
I added it via AD users and computers
0
 

Author Comment

by:J.R. Sitman
ID: 20028420
I added the new user from a different Server.  Does it have to be added directly from the member server?
0
 
LVL 30

Accepted Solution

by:
LauraEHunterMVP earned 2000 total points
ID: 20028422
> "I added it via AD users and computers"

By doing so, you have only created the user account. You must now add the user account to the local Administrators group on the member server in question using the Computer Management MMC snap-in on the member server.  Note - you will require the use of an account that already possesses administrative rights to this server (in this case, the Administrator account) in order to perform this action.
0
 

Author Comment

by:J.R. Sitman
ID: 20028440
OK.  I just did that and it shows the user as "users" and "Administrators" but I'm still getting the original warning, that I don't have local admin rights
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028446
Changes in group membership will not apply until you log out of the server and log back in.
0
 

Author Comment

by:J.R. Sitman
ID: 20028458
Just for grins I rebooted.  I logged on as the new user and opened the MMC for computers, went to the local users and it shows the new user as an Administrators and user, but still having the same problem.  I really appreciate you hanging in there with me.  This project is so I can get the President of our company, STUPID new blackberry communicating with the exchange server.
0
 
LVL 30

Expert Comment

by:LauraEHunterMVP
ID: 20028466
I assume you have checked the Event Viewer on the server for any meaningful errors, as well as any error logs produced by the application installer itself.

If these do not produce any useful information, my only other recommendation would be to attempt the install using the actual administrator account.
0
 

Author Comment

by:J.R. Sitman
ID: 20028517
Got it.  I right click on the set up file and changed how it was being installed.
I accepted one of your earlier procedures.

Thanks for all your help.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

750 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question