Solved

How to create in Windows Server 2003 administrative users?

Posted on 2011-02-20
8
266 Views
Last Modified: 2012-05-11
Hello

I have my windows server standard 2003 and i have 15 computers.
I like to create administrative users for 5 computers. Now all users can not install programs, change network configuration, etc..

What i need to do to create administrative users for 5 computers, that have full acess to computer.

Have a nice day

Thanks
Regards
William

0
Comment
Question by:williamit
8 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 34936249
There are several ways to do this.  What I do is create a group called Local Admin on the server, add the users to the group you want to have full access and then add the local admin group to the Administrators group on the local computer.

That way you can control access to the group from the server.
0
 
LVL 8

Assisted Solution

by:Toxacon
Toxacon earned 166 total points
ID: 34936326
I assume you have Active Directory.

1. Create a group "WorkstationAdmins" to the AD.
2. Add the five users to that group above.
3. Add this group to Workstation group "Administrators".
4. Ask the five users to logoff and logon again.

Now the five users have full access to the workstations.
0
 

Author Comment

by:williamit
ID: 34936801
Hello Toxan

I create a group in my AD , and do all steps what you say, but this 5 users, that i like to have full acess to computer, continuing having restrict acess.

What i need to do more?

 Have a Nice Day

Thanks
Regards
William

0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 34936806
William - are you only going to respond to the last comment in the thread from Toxacon, despite mr commenting first and providing the same answer?

If that's the case, I'll unsubscribe.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 3

Accepted Solution

by:
rob_AXSNL earned 167 total points
ID: 34936826
I think you want to do this via the Group policy add in.

Create a group to encapsulate the computers (Admin-PC) and add them to this group

Create a GPO (Admin-PC-Policy) and link it to the OU where the computers reside

In the GPO, set the following:

•Comp Config - Windows Settings - Security Settings - Restricted Groups
•Right click, Add Group
•"Administrators", OK
•Members of this Group: myDomain\Admin-PC
execture gpupdate/force

goodluck

0
 

Author Comment

by:williamit
ID: 34936830
Hello  Alanhardisty

Sorry, thanks for help.

I create a group in my AD , and do all steps what you say, but this 5 users, that i like to have full acess to computer, continuing having restrict acess.

What i need to do more?

 Have a Nice Day

Thanks
Regards
William
0
 
LVL 76

Assisted Solution

by:Alan Hardisty
Alan Hardisty earned 167 total points
ID: 34936894
Please explain what it is exactly that you need.  You can't have full access and at the same time have restricted access.
0
 

Author Closing Comment

by:williamit
ID: 35762895
Thanks
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
exchange, windows server 6 57
Trust one-way issue 2 52
how can I practice with windows server os 2 57
Event ID: 5719 / Source: NETLOGON 9 102
I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This tutorial gives a high-level tour of the interface of Marketo (a marketing automation tool to help businesses track and engage prospective customers and drive them to purchase). You will see the main areas including Marketing Activities, Design …

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now