• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1687
  • Last Modified:

Vista Business - Understanding user accounts - local & domain

I'm running Vista Business, pre-installed on new PC.  On setup I specified a local account which was configured as an administrator.  I added the device to the domain and everything worked lovely under the local account.  I then realised that I was running under the local account and not the domain account so changed logon over to the domain account (i.e. was logging in as LOCAL\USER now DOMAIN\USER), however there are certain programs I cannot run under the domain account because of privlege issues, so have to log in as the local account.

I think I'm confusing myself with how XP used to work and really just looking for an explaination of how the local user account works within a domain and whether you do need to logon as a domain account to benefit from the resources available (I didn't seem to have any issues accessing this under the local account)?  It all seems to be over complicated - or I'm over complicating it!  If I do need to log onto the domain account, how can I change privleges to ensure I can run all of the applications?
0
bushpiggy
Asked:
bushpiggy
4 Solutions
 
5t34lth_G33kCommented:
-  whether you do need to logon as a domain account to benefit from the resources available

When you add a Windows machine to a domain, the domain administrators group should be added to the local administrators group, meaning that any domain admin should have full rights to the whole PC. I have had it in the past where I couldnt access certain things as a domain admin - removing and adding again to the domain fixed it, I suggest you try that.

If not, you can always add the group manually - right click my computer -> click manage -> click local users and groups -> click groups -> right click administrators -> click properties -> click add -> browse to the group/user you would like to add and click OK.
0
 
Brad GrouxCommented:
When you log on via the local account you may have access to some of the domain features, such as the internet gateway and/or proxy server... if they require a login just login with your domain credentials.

However, if you log in with the domain account you are limited to whatever policies are set in place for your user and the groups that your user are in... there is no way  around those, that's the point of the domain and AD structure.

Logging in with a local account only fools the domain on settings on your local machine. For instance, let's say that you can't change your desktop background when logged in as a domain user but can as local.

If you try to do things on the domain you'll be prompted for login credentials which would limit you just as they would if you are logged in the domain account.
0
 
McKnifeCommented:
Check out what local user group your domain account should be in. Default is user, not administrators. The local account created during setup is an administrative account - that's the difference.
0
Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

 
bushpiggyAuthor Commented:
Hi and thanks to all your comments.

I have removed and re-added the computer to the domain, checked that my domain account is a member of administrators and also checked that that the domain admins is part of the local admins group...  

The program I'm having trouble with is Adobe Output Designer 5.5 and although it works under the local admin account, it won't run under the domain account - hence why I thought it was an account issue not a program issue.  I changed the ownership of the folder in program files to Administrators group (changed it from local user account as thought this might be the issue) still not able to run the application, it just does nothing...
0
 
5t34lth_G33kCommented:
Try uninstalling it and reinstall under the domain account
0
 
bushpiggyAuthor Commented:
Hi, yes tried installing under domain account however it comes back in error "unable to obtain version number from registry key \Software\Adobe\Output Designer\5.5\JfDesign"

Trying to get info from Adobe KB/Forums but not had much luck so far...
0
 
5t34lth_G33kCommented:
sounds like your domain account hasnt got the right permissions on that machine - can you browse to and open that key in regedit?
0
 
bushpiggyAuthor Commented:
I have tried to browse to that key but it only goes as far as ...\Output Designer.  I've researched the installation of the software and it does specify that the reg keys are written to the HKLM first and then copied to HKCU.  When I go into regedit under the local account the full key is accessible.

The domain account is set as an administrator.  I wasn't sure if it was to do with the ownership of the objects as I found that under program files, the adobe output designer folder & children were set to the local account as ownership, whereas when I checked another application folder within the program files, the owner was Administrators...?

Thank you for your comments so far...
0
 
bushpiggyAuthor Commented:
Ok, I found that my domain account was missing registry entries under HKCU for Adobe Output Designer, so created these (after registry backup!) which then allowed me the option to repair or uninstall the app.  I chose to repair which wiped out the serial number (I'd already made a note of this) so once re-entered registry keys that were blanked I was able to run Adobe Output Designer 5.5 under my domain account.

It seems that there maybe was some permission issues that prevented the correct installation under the domain account - but glad for all your comments.

Thanks
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now