asked on

Why do I have to authenticate to the domain to add a local user to a local group?

I login to a Windows 2008 Server as Administrator and when I try to add a user to a group, it makes me authenticate to the domain before I can do so.

As soon as I click the Add button, I get a dialog containing the following message:

Windows Security
Enter Network Password
Enter the name and password of an account with permissions for <name of domain is here>

So I enter my network credentials and it allows me to add the user.

If I login to the server with my domain account, it doesn't prompt me because I am already authenticated to the domain. If I were modifying a domain group, that would make sense to me. But this is a local group defined on the server, not on the domain.

Is there a setting that controls this?

Thanks!

dew_associates

Although you haven't stated how you manage security issues on this server, Windows Security Authentication in Windows Server 2008 dates back to 2003. The following should help you.

http://www.techrepublic.com/article/understand-windows-authentication-to-improve-security/5054630

ASKER CERTIFIED SOLUTION

Rich Rumble

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

MajorBigDeal

ASKER

Thanks Rich, after reading your comment, I tried cancelling the dialog but continuing to add the user. I am able to add a local account without authenticating to the domain, I just have to cancel the dialog first. Of course, when adding a domain account it doesn't work unless I authenticate first.

I was just confused because I was assuming that the dialog would not come up unless I actually needed to authenticate. Bad assumption.

MajorBigDeal

ASKER

See https://www.experts-exchange.com/questions/27523605/Windows-Server-2008-Adding-Users-to-Group-Problem.html for additional info.