Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 622
  • Last Modified:

Domain admin problem

We've already a couple of WIndows 7 machines, but i noticed something strange. Apparantly havind domain admin rights doesn't mean you have all full admin rights. Which is strange I think. How come and is there a way to change this?

Jvuz
0
jvuz
Asked:
jvuz
  • 5
  • 5
  • 2
  • +1
2 Solutions
 
David_IngledewCommented:
What version is the AD?
0
 
jvuzAuthor Commented:
We're using Linux servers (Samba 3.4.3).
0
 
David_IngledewCommented:
Sorry I can't help - not experienced in that...my thoughts were that the policies didn't extend to some of the newer Win7 calls...
0
Build your data science skills into a career

Are you ready to take your data science career to the next step, or break into data science? With Springboard’s Data Science Career Track, you’ll master data science topics, have personalized career guidance, weekly calls with a data science expert, and a job guarantee.

 
clintonbrighamCommented:
Windows Vista, 7, 2008 all use a "new" security feature called User Account Control. Basically regardless of what role you have assigned an account it is still only a basic user account until those privledges are elevated.  Here is the TechNet article that explains User Account Control:

http://technet.microsoft.com/en-us/library/cc772207(WS.10).aspx
0
 
Netman66Commented:
When you joined this Samba domain, did the Domain Admin group get added to the local Administrators group?  I'm not certain it would do it automatically since it's not a Windows-based domain.  You may need to add this group manually.

Also, as was mentioned, you might need to turn off UAC for the Administrators if adding the group doesn't automatically take care of this.

0
 
jvuzAuthor Commented:
I'll have to check for the domain admins in the group administrators. I'll let you know tomorrow.
0
 
jvuzAuthor Commented:
The domain admin is in the administrators group.
If I disable the UAC, everyting works like it should be, but when I reenable it, I'm back to 0.
i'm afraid I'll have to turn of UAC. i don't want to, but if it doesn't work, I'll need to unless someone else has an idea.

Jvuz
0
 
Netman66Commented:
You can selectively turn it off for only Administrators - this gives you peace of mind knowing that normal users still end up with UAC enabled.

How To is here:  http://www.howtogeek.com/howto/windows-vista/disable-user-account-controluac-for-administrators-only/

This policy setting is likely available from a server-side GPO (I don't have the ability to test it here), so that you don't have to go around to each machine.

Create a new GPO and attach it to the domain and make this single setting in that policy.

0
 
Netman66Commented:
@jvuz - what did you ultimately end up doing?  If UAC was part of (or the entire) solution, then it's only fair to split points with clintonbrigham.

Please let us know and I can have this Q re-opened so that points can be fairly distributed.

0
 
jvuzAuthor Commented:
I turned UAC off, like you suggested. That's why I didn't split points. If you think I should split the points, no problem. Then you can reopen the question and I'll split the points.

Jvuz
0
 
Netman66Commented:
In the interest of the spirit of this site, and because clintonbrigham mentioned UAC first before I specified how to turn it off, I would like to see a point split of 200 to him and 300 to me (only for providing more detail).

If you like, I can have a Mod reopen so you can redistribute the points - or you can do it yourself - let me know either way and I'll be happy to assist.

NM
0
 
jvuzAuthor Commented:
You may reopen the question and I'll divide the points regardingly.

jvuz
0
 
Netman66Commented:
There you go!  Ready for you to distribute now.

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

A proven path to a career in data science

At Springboard, we know how to get you a job in data science. With Springboard’s Data Science Career Track, you’ll master data science  with a curriculum built by industry experts. You’ll work on real projects, and get 1-on-1 mentorship from a data scientist.

  • 5
  • 5
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now