Solved

New PC on Win SBS 2003 domain - being asked for Domain Admin credentials when making changes.

Posted on 2013-02-05
10
455 Views
Last Modified: 2013-02-07
Hi guys,

I've added two Windows 7 laptops to a Windows SBS 2003 Domain but keep getting pop-up windows when installing new programs/ making changes asking for the Domain Administrator credentials. I know them, so I can enter them and proceed, but I can't seem to figure out how to give the PC/ user sufficient privileges to avoid these messages. I know I've done this before, but seem to be having trouble working out what to do this time. I have double-clicked on their user profile in SERVER MANAGEMENT, clicked on the MEMBERS OF tab and have added them to Power Users, etc, groups but there is no change, even after a restart. Please help!
0
Comment
Question by:Servant-Leggie
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3
10 Comments
 
LVL 5

Expert Comment

by:tjc123
ID: 38857994
You need to go into the User Accounts area of the Windows 7 machines and add the local user account as an Admin or turn off UAC.
0
 
LVL 4

Expert Comment

by:Nicolus
ID: 38857997
Read up a little about User Roles...  The only per se advantage of Power User is the fact that the user can create shares.

You need to either add these users to the local admin group or use GPO to allow these users to make the changes you want to allow.

If you need more help with adding users to a local admin group, ask
0
 

Author Comment

by:Servant-Leggie
ID: 38858014
Thanks, tjc123, I'll get a chance to do this in the next 24hrs or so and will let you know how it goes.

Nicolus, will do some reading! When you say "...adding users to a local admin group...", I have added the users as local admins (following the procedure I mentioned initially, I added them as part of the Administrator Group - as I understand it, this is what you're referring to?!
0
Free Webinar: AWS Backup & DR

Join our upcoming webinar with experts from AWS, CloudBerry Lab, and the Town of Edgartown IT to discuss best practices for simplifying online backup management and cutting costs.

 
LVL 4

Accepted Solution

by:
Nicolus earned 500 total points
ID: 38858034
On the local machine, log in as an Admin enable user, Right Click on Computer > Manage> Local Users & Groups> Group> and add Domain User to the Administrators group.

This basically mimics a standalone admin user on a machine that happens to be on a domain
0
 
LVL 80

Expert Comment

by:David Johnson, CD, MVP
ID: 38858152
On a domain the users are standard users by default, Standard users do not have the privileges to make system changes  i.e. add/remove programs.  Most domains have the PC's setup by the administrators and the users are simply users.  This keeps most machines available without needing administrators to reload the image of the pc, or worry about unwanted software on the domain network.

You can use SCCM to approve software and have it available for install and it will be installed for the user.

Gone are the days when domain users can make system-wide changes to their PC.  If you want to reduce the system security you can disable UAC, or add the user to the local administrators group and let them re-enter their password to install software.. This is not the recommended procedure.
0
 
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 38858890
add that user to local admin group and then run the program by right clicking it and select run as administrator.
0
 
LVL 11

Expert Comment

by:hecgomrec
ID: 38859253
What Nicolus said is correct.

Just make sure that your user or you are login into the computer with the domain-user account instead of the local account.

To avoid conflicts, you can eliminate the local account or if you want to leave both just make sure both accounts are in the administrators groups.

Good Luck
0
 

Author Closing Comment

by:Servant-Leggie
ID: 38862479
Thanks Nicolus, your answer was spot on (as you knew) and the problem is now resolved. Strangely, I haven't had to do these steps for other users who are running Windows 7 Pro towers on their Windows Server 2003 Domain- just removed their old XP towers, installed their new Win7 towers, added them to the domain (with a different PC name to the one being replaced) and continued with the usual data transfer/ email setup/ etc. I'm sure there's a good reason why, but as I'm (clearly) not yet an expert at handling servers/ domains/ permissions, I don't quite understand.
0
 
LVL 11

Expert Comment

by:hecgomrec
ID: 38864845
I know this was aswered but based on your last comment, Servant, if the new machines were prepared as separated machines, just follow the process described to you earlier to find out if the users is using a local account or a domain account.
0
 

Author Comment

by:Servant-Leggie
ID: 38866333
Hi hecgomrec, will do, just thought it was strange that I didn't follow the prescribed procedure on previously installed machines, yet have had none of these issues on said machines.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Hyper-V-server 2016 13 137
Supermicro 91 error 8 64
AD account Auto logoff 1 39
Trying to repair Windows Server 2003 - No recovery option - Should I proceed with Install CD? 21 53
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
The viewer will learn how to successfully download and install the SARDU utility on Windows 7, without downloading adware.

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question