windows 7 administrator account domain access
I am working with a windows 7 machine. It is connected to a domain. If I create a user for the Domain and give the user Administrative rights, I cannot edit the host file. If I log into the machine as the Local Administrator it works fine. I need the domain user to have Full Admin rights to the local machine but still be logging into the domain. How do I accomplish this in windows 7. The doamin user needs full rights to the machine to run certain applications and use certain external hardware.
ASKER
OK I have a group on my Domain call "Domain Users" that includes all the members of the domain. then I go to the local machine under local users and groups choose the administrator group then add my Domain users group and then apply ..log off and back in and still have the same issue
what am I doing wrong
what am I doing wrong
Right click Notepad in the Start Menu (just type it in the search box) and select "Run As Administrator". Then see if you can edit it.....
Also if this is NOT a new machine, the HOSTS file is a target of malware, in which it can be set to Read Only, as well as having ALL standard permissions stripped.....
And are you REALLY going to have ALL Domain Users as Local Admins?
Also if this is NOT a new machine, the HOSTS file is a target of malware, in which it can be set to Read Only, as well as having ALL standard permissions stripped.....
And are you REALLY going to have ALL Domain Users as Local Admins?
ASKER
the host file isnt the only issue. I have twain scanner that interfaces with a 3rd party piece of software that works fine as the local adminitrator, doesnt work as domain user with admin rights to the machine. know I do not want to give all domain users admin rights to the machine.
But I have to get this working
But I have to get this working
In the Local Security policy (secpol.msc)n what are the last 10 settings for User Account Control?
Screenshot would be ideal...
What you are seeing is definately not the default...
Screenshot would be ideal...
What you are seeing is definately not the default...
and do users have a fixed profile?
ASKER
We are using roaming profiles
How are you adding them to the local group? (I know it is a basic question, but...)
ASKER
I am not I am just adding the user to the machine as a domain user with adminstrator rights
But how? You still have to have the Domain User as a member of the Local Administrators group, in lusrmgr.msc......
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
no resolution
ASKER
no resolution, reload of machine didnt correct issue, no idea
And then on the local computer, add this group to the Administrator group. If all users neeed local admin rights, you can add the Domein users to the computer Administrator group