hotrobb97
asked on
Is it possible to access network computers with domain admin privleges and not local privleges?
I'm trying to access some network computers via c$.., I have access to most but there's a few I cannot access.. Is there away I can access these computers without physically jumping from machine to machine adding myself to the local permissions?
Doesn't seem like all the machines are correctly members of the domain. The domain admin is automatically added to the local admin group when you add a machine to the domain. If you cannot access the admin share there may be a problem with domain membership or a GPO that is restricting access. Check Resultant Policy in AD to see what policy settings may be restricting you from admin shares.
It sounds to me as though the 'Domain Admins' group has been removed from membership of the problematic machine's local Administrators group.
You can use Restricted Groups to force the Domain Admins group back as a member of the Administrators group, which should restore the permissions to network logins.
http://www.windowsecurity.com/articles/Using-Restricted-Groups.html
-tigermatt
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.