Link to home
Start Free TrialLog in
Avatar of hotrobb97
hotrobb97

asked on

Is it possible to access network computers with domain admin privleges and not local privleges?

I'm trying to access some network computers via c$..,  I have access to most but there's a few I cannot access.. Is there away I can access these computers without physically jumping from machine to machine adding myself to the local permissions?
Avatar of armynt4
armynt4

Doesn't seem like all the machines are correctly members of the domain.  The domain admin is automatically added to the local admin group when you add a machine to the domain.  If you cannot access the admin share there may be a problem with domain membership or a GPO that is restricting access.  Check Resultant Policy in AD to see what policy settings may be restricting you from admin shares.
Avatar of tigermatt

It sounds to me as though the 'Domain Admins' group has been removed from membership of the problematic machine's local Administrators group.

You can use Restricted Groups to force the Domain Admins group back as a member of the Administrators group, which should restore the permissions to network logins.

http://www.windowsecurity.com/articles/Using-Restricted-Groups.html

-tigermatt
ASKER CERTIFIED SOLUTION
Avatar of gratex_ssd
gratex_ssd
Flag of Slovakia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial