Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win

x
?
Solved

Local Admin rights with Standard Users

Posted on 2011-03-05
20
Medium Priority
?
868 Views
Last Modified: 2012-06-27
Ok.  Perhaps I did something brain-dead.  

I used the wizard to add multiple accounts and used standard rather than administrator when creating.  I performed the File and Settings transfer wizard prior to joining them to the domain.  I then joined the domain and attempted to fun that wizard again to pull their profile data into the domain profile.  (I hope I'm right with the jargon, relatively new to this).  I get the message to log in under my administrator account to perform.  Also tested to see if I could install programs or access certain properties to prove the users do not have local admin rights.  

Could someone please give me a step by step of how to all local admin rights to each user so they may install programs, hardware and basic everyday tasks?

Thanks for your guidance.

Regards,

Rexx
0
Comment
Question by:rexxnet
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 10
  • 9
20 Comments
 
LVL 2

Expert Comment

by:tyol
ID: 35043213
simply add Users group (like interactive or authenticated) in Local Administrators group :)

0
 

Author Comment

by:rexxnet
ID: 35043245
Simple to you.  I've been here since 3am.  LOL.

Could you step by step it?  First go here, then, click this, then click that, etc?  

I know it's a pain, but this is my first server install on my own (can't ya tell?).
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043296
Push server manager button in task pane right near Start button

in server manager click Configuration
then Local users and groups
then groups
then Administrators

in that window click add
than click advanced button then click search button and select needed groups
0
Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 

Author Comment

by:rexxnet
ID: 35043369
Unfortunately, under Configuration, Local Users and Groups is not there.  Please see attached.  Am I in the wrong area of Server Manager?

Thanks. No Local Users and Groups
0
 

Author Comment

by:rexxnet
ID: 35043373
Also, once I find this, what groups do I need to add to give local admin rights?
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043503
Authenticated Users
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043511
screen where is groups
admins.JPG
0
 

Author Comment

by:rexxnet
ID: 35043525
local users and groups is not there on mine.  please see the image in my previous comment.
0
 
LVL 2

Expert Comment

by:shesters
ID: 35043585
It appears you have expanded task manager. I recommend clicking the minus sign next to task manager, if you look at tyol's screen shot you will see what I mean. On yours you have expanded task scheduler and windows firewall. So I am not sure if your local users and groups have just been pushed to the way bottom are if it is missing completely.
0
 

Author Comment

by:rexxnet
ID: 35043613
Please see, attached.  It is not there.
servermanagernousersandgroups.jpg
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043658
cool. it may be.

my server is domain member :)

did you find where is groups?
0
 

Author Comment

by:rexxnet
ID: 35043664
no.  it is not there.  please see image in my previous post with only configuration expanded.  This is the domain controller
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043676
ah domain controller....

do you want simple users work on domain controller?
It's not good idea...
0
 
LVL 2

Expert Comment

by:tyol
ID: 35043677
or you want them to be administrators on domain members machines?
0
 

Author Comment

by:rexxnet
ID: 35043720
I want them to be administrators on their local machines.  Not on the DC.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044171
ok.
Then you must add Domain Users Group into local administrators group thru Group Policy

Or (but not recomended action) add domain Users group to Domain Admins group. (It's very bad solution)

i try to find instruction to "how add users in local group from GPO" then link it here
0
 
LVL 2

Expert Comment

by:tyol
ID: 35044269
http://support.microsoft.com/kb/320065/en-us  this article for 2000 domain as far as i know it work and in 2008 environment
0
 

Accepted Solution

by:
rexxnet earned 0 total points
ID: 35044285
actually, all you have to do is sign in with administrator priveledges on the machine through the domain, go into the user accounts/change account type/add the user on and make them administrator.  They stay a standard user on the domain and a local administrator.  Figured it out on my own.  Thank you both for your input.
0
 
LVL 2

Expert Comment

by:tyol
ID: 35045860
if another user comes to that machine you must go there and again add them to local admins

i show Universal solution without any Handy actions
0
 

Author Closing Comment

by:rexxnet
ID: 35107030
Figured it out on my own
0

Featured Post

Veeam Task Manager for Hyper-V

Task Manager for Hyper-V provides critical information that allows you to monitor Hyper-V performance by displaying real-time views of CPU and memory at the individual VM-level, so you can quickly identify which VMs are using host resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Resolving an irritating Remote Desktop connection that stops your saved credentials from being used.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

597 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question