[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 314
  • Last Modified:

Can I assign other users permissions to unlock a workstation besides the admin

I have a child domain with 2 users that are full admins to that domain BUT do not use/have the administrator logon information.  These 2 users manage thier small group of users and have come across this issue of thier login accounts unable to unlock a workstation within their child domain.  I am wanting to give these 2 users permissions (somehow) to unlock a workstation within thier domain.  Is that possible?  or is the administrator login info and the user the only people who can unlock the station?

The workstations are IBM Thinkcenters running Windows XP: Pro on a Windows 2003 server child/sub domain.
0
kathy_harvey
Asked:
kathy_harvey
  • 2
  • 2
3 Solutions
 
Joseph TshiteyaCommented:
As long as your "sub" admins are members of the local machine Administrators group or are member of the sub-domain Domain Admins group and that group is a member of each machine's local Administrators group, then they should be able to unlock workstations locked by end-users.
0
 
Bird DogCommented:
If these two users are in domain admins groujp they should be able to unlock the computers. Also if you add these two users on the local machine to the administrators group they should then be able to unlock the computer.
0
 
kathy_harveyAuthor Commented:
Those permission changes you are talking about, is there a way I can do it via group policy or will I have to add them on each workstation?
0
 
Bird DogCommented:
I would test on a couple of machines first I will check for the group policy thing but I don't remember seeing it. What about adding them to the domain admin group on your server. this will give you close to the same result.
0
 
kathy_harveyAuthor Commented:
I am about to test the Domain Admin permission very soon to confirm.  I dug in GP and couldn't find it either but like we all know it is a maze in there!!!  I am so very thankful of all the fast responses and I will be awarding points very soon.  

Oh and I am wanting to just push the LOCAL admin permission via group policy but I don't think it can be done, just hoping.
0

Featured Post

Transaction-level recovery for Oracle database

Veeam Explore for Oracle delivers low RTOs and RPOs with agentless transaction log backup and transaction-level recovery of Oracle databases. You can restore the database to a precise point in time, even to a specific transaction.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now