Solved

Local Admin rights with Standard Users

Posted on 2011-03-05
20
854 Views
Last Modified: 2012-06-27
Ok.  Perhaps I did something brain-dead.  

I used the wizard to add multiple accounts and used standard rather than administrator when creating.  I performed the File and Settings transfer wizard prior to joining them to the domain.  I then joined the domain and attempted to fun that wizard again to pull their profile data into the domain profile.  (I hope I'm right with the jargon, relatively new to this).  I get the message to log in under my administrator account to perform.  Also tested to see if I could install programs or access certain properties to prove the users do not have local admin rights.  

Could someone please give me a step by step of how to all local admin rights to each user so they may install programs, hardware and basic everyday tasks?

Thanks for your guidance.

Regards,

Rexx
0
Comment
Question by:rexxnet
  • 10
  • 9
20 Comments
 
LVL 2

Expert Comment

by:tyol
ID: 35043213
simply add Users group (like interactive or authenticated) in Local Administrators group :)

0
 

Author Comment

by:rexxnet
ID: 35043245
Simple to you.  I've been here since 3am.  LOL.

Could you step by step it?  First go here, then, click this, then click that, etc?  

I know it's a pain, but this is my first server install on my own (can't ya tell?).
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043296
Push server manager button in task pane right near Start button

in server manager click Configuration
then Local users and groups
then groups
then Administrators

in that window click add
than click advanced button then click search button and select needed groups
0
 

Author Comment

by:rexxnet
ID: 35043369
Unfortunately, under Configuration, Local Users and Groups is not there.  Please see attached.  Am I in the wrong area of Server Manager?

Thanks. No Local Users and Groups
0
 

Author Comment

by:rexxnet
ID: 35043373
Also, once I find this, what groups do I need to add to give local admin rights?
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043503
Authenticated Users
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043511
screen where is groups
admins.JPG
0
 

Author Comment

by:rexxnet
ID: 35043525
local users and groups is not there on mine.  please see the image in my previous comment.
0
 
LVL 2

Expert Comment

by:shesters
ID: 35043585
It appears you have expanded task manager. I recommend clicking the minus sign next to task manager, if you look at tyol's screen shot you will see what I mean. On yours you have expanded task scheduler and windows firewall. So I am not sure if your local users and groups have just been pushed to the way bottom are if it is missing completely.
0
 

Author Comment

by:rexxnet
ID: 35043613
Please see, attached.  It is not there.
servermanagernousersandgroups.jpg
0
What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

 
LVL 2

Expert Comment

by:tyol
ID: 35043658
cool. it may be.

my server is domain member :)

did you find where is groups?
0
 

Author Comment

by:rexxnet
ID: 35043664
no.  it is not there.  please see image in my previous post with only configuration expanded.  This is the domain controller
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043676
ah domain controller....

do you want simple users work on domain controller?
It's not good idea...
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043677
or you want them to be administrators on domain members machines?
0
 

Author Comment

by:rexxnet
ID: 35043720
I want them to be administrators on their local machines.  Not on the DC.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044171
ok.
Then you must add Domain Users Group into local administrators group thru Group Policy

Or (but not recomended action) add domain Users group to Domain Admins group. (It's very bad solution)

i try to find instruction to "how add users in local group from GPO" then link it here
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044269
http://support.microsoft.com/kb/320065/en-us  this article for 2000 domain as far as i know it work and in 2008 environment
0
 

Accepted Solution

by:
rexxnet earned 0 total points
ID: 35044285
actually, all you have to do is sign in with administrator priveledges on the machine through the domain, go into the user accounts/change account type/add the user on and make them administrator.  They stay a standard user on the domain and a local administrator.  Figured it out on my own.  Thank you both for your input.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35045860
if another user comes to that machine you must go there and again add them to local admins

i show Universal solution without any Handy actions
0
 

Author Closing Comment

by:rexxnet
ID: 35107030
Figured it out on my own
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now