Solved

Local Admin rights with Standard Users

Posted on 2011-03-05
20
860 Views
Last Modified: 2012-06-27
Ok.  Perhaps I did something brain-dead.  

I used the wizard to add multiple accounts and used standard rather than administrator when creating.  I performed the File and Settings transfer wizard prior to joining them to the domain.  I then joined the domain and attempted to fun that wizard again to pull their profile data into the domain profile.  (I hope I'm right with the jargon, relatively new to this).  I get the message to log in under my administrator account to perform.  Also tested to see if I could install programs or access certain properties to prove the users do not have local admin rights.  

Could someone please give me a step by step of how to all local admin rights to each user so they may install programs, hardware and basic everyday tasks?

Thanks for your guidance.

Regards,

Rexx
0
Comment
Question by:rexxnet
  • 10
  • 9
20 Comments
 
LVL 2

Expert Comment

by:tyol
ID: 35043213
simply add Users group (like interactive or authenticated) in Local Administrators group :)

0
 

Author Comment

by:rexxnet
ID: 35043245
Simple to you.  I've been here since 3am.  LOL.

Could you step by step it?  First go here, then, click this, then click that, etc?  

I know it's a pain, but this is my first server install on my own (can't ya tell?).
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043296
Push server manager button in task pane right near Start button

in server manager click Configuration
then Local users and groups
then groups
then Administrators

in that window click add
than click advanced button then click search button and select needed groups
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:rexxnet
ID: 35043369
Unfortunately, under Configuration, Local Users and Groups is not there.  Please see attached.  Am I in the wrong area of Server Manager?

Thanks. No Local Users and Groups
0
 

Author Comment

by:rexxnet
ID: 35043373
Also, once I find this, what groups do I need to add to give local admin rights?
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043503
Authenticated Users
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043511
screen where is groups
admins.JPG
0
 

Author Comment

by:rexxnet
ID: 35043525
local users and groups is not there on mine.  please see the image in my previous comment.
0
 
LVL 2

Expert Comment

by:shesters
ID: 35043585
It appears you have expanded task manager. I recommend clicking the minus sign next to task manager, if you look at tyol's screen shot you will see what I mean. On yours you have expanded task scheduler and windows firewall. So I am not sure if your local users and groups have just been pushed to the way bottom are if it is missing completely.
0
 

Author Comment

by:rexxnet
ID: 35043613
Please see, attached.  It is not there.
servermanagernousersandgroups.jpg
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043658
cool. it may be.

my server is domain member :)

did you find where is groups?
0
 

Author Comment

by:rexxnet
ID: 35043664
no.  it is not there.  please see image in my previous post with only configuration expanded.  This is the domain controller
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043676
ah domain controller....

do you want simple users work on domain controller?
It's not good idea...
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043677
or you want them to be administrators on domain members machines?
0
 

Author Comment

by:rexxnet
ID: 35043720
I want them to be administrators on their local machines.  Not on the DC.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044171
ok.
Then you must add Domain Users Group into local administrators group thru Group Policy

Or (but not recomended action) add domain Users group to Domain Admins group. (It's very bad solution)

i try to find instruction to "how add users in local group from GPO" then link it here
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044269
http://support.microsoft.com/kb/320065/en-us  this article for 2000 domain as far as i know it work and in 2008 environment
0
 

Accepted Solution

by:
rexxnet earned 0 total points
ID: 35044285
actually, all you have to do is sign in with administrator priveledges on the machine through the domain, go into the user accounts/change account type/add the user on and make them administrator.  They stay a standard user on the domain and a local administrator.  Figured it out on my own.  Thank you both for your input.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35045860
if another user comes to that machine you must go there and again add them to local admins

i show Universal solution without any Handy actions
0
 

Author Closing Comment

by:rexxnet
ID: 35107030
Figured it out on my own
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

791 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question