• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 249
  • Last Modified:

windows 7 administrator account domain access

I am working with a windows 7 machine. It is connected to a domain.  If I create a user for the Domain and give the user Administrative rights, I cannot edit the host file. If I log into the machine as the Local Administrator it works fine.  I need the domain user to have Full Admin rights to the local machine but still  be logging into the domain. How do I accomplish this in windows 7.  The doamin user needs full rights to the machine to run certain applications and use certain external hardware.
0
bgardner1
Asked:
bgardner1
  • 8
  • 4
  • 2
1 Solution
 
peter197911Commented:
create a group in the domain, add all domain users to it

And then on the local computer, add this group to the Administrator group. If all users neeed local admin rights, you can add the Domein users to the computer Administrator group
0
 
bgardner1Author Commented:
OK I have a group on my Domain call "Domain Users" that includes all the members of the domain. then I go to the local machine under local users and groups  choose the administrator group then add my Domain users group and then apply ..log off and back in and still have the same issue
what am I doing wrong
0
 
johnb6767Commented:
Right click Notepad in the Start Menu (just type it in the search box) and select "Run As Administrator". Then see if you can edit it.....

Also if this is NOT a new machine, the HOSTS file is a target of malware, in which it can be set to Read Only, as well as having ALL standard permissions stripped.....

And are you REALLY going to have ALL Domain Users as Local Admins?
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
bgardner1Author Commented:
the host file isnt the only issue. I have twain scanner that interfaces with a 3rd party piece of software that works fine as the local adminitrator, doesnt work as domain user with admin rights to the machine. know I do not want to give all domain users admin rights to the machine.
But I have to get this working
0
 
johnb6767Commented:
In the Local Security policy (secpol.msc)n what are the last 10 settings for User Account Control?

Screenshot would be ideal...

What you are seeing is definately not the default...
0
 
bgardner1Author Commented:
see attached
 Doc1.docx
0
 
peter197911Commented:
and do users have a fixed profile?
0
 
bgardner1Author Commented:
We are using roaming profiles
0
 
johnb6767Commented:
How are you adding them to the local group? (I know it is a basic question, but...)
0
 
bgardner1Author Commented:
I am not I am just adding the user to the machine as a domain user with adminstrator rights
0
 
johnb6767Commented:
But how? You still have to have the Domain User as a member of the Local Administrators group, in lusrmgr.msc......
0
 
bgardner1Author Commented:
No soultion to this issue
0
 
bgardner1Author Commented:
no resolution
0
 
bgardner1Author Commented:
no resolution, reload of machine didnt correct issue, no idea
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 8
  • 4
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now