Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 380
  • Last Modified:

Giving access to domain users on windows server 2003

I'm doing a test in my lab.  I have a windows server 2003 installed and also its a domain controller.  I have 3 workstations: xp, win 7, and win8.  After joining the 3 clients (already created 3 users) to the domain, it appears that none of these client have admin access.  
I know hoe to do it locally on the workstation.
Can you please guys show me how to do it through the server itself for the three users.
I want them to have admin access on their workstation but i wanna did it though the server itself...

Thanks for your help.
0
techlabtest
Asked:
techlabtest
  • 10
  • 8
  • 2
1 Solution
 
Radhakrishnan RITCommented:
Hi,

I believe that you would like to add the 3 users with full admin rights? if so, you can add the "domain admins" group from Active Directory Users and Computers to the users.
But, this is not recommended to give this permission to a normal user as this account will be getting all kind of privileges.
0
 
techlabtestAuthor Commented:
takecoffe:  I need it to be done from the server itself...I'm asking only how give administrative rights to users on the domain (not securing!!!)...I know how to do it on the user's pc, but i wanna knoe how to do it through the server itself for the 3 users..Thanks

radhakrishnan2007:  I have done it, but doesn't work!!!

Please help....

Thanks
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
Haresh NikumbhCommented:
you want to give local admin rights or domain? if local admin rights then i have already given link... tht group policy need to configured on server...
0
 
Radhakrishnan RITCommented:
Hi,

Verify that the users are actually a member of the domain admins group?
Check the type of the group in AD and make sure that it is a Security group. Distribution groups are not supported.
If the user is a member of multiple groups which are added in the policy, make sure that there are no conflicting permissions which apply to the user. e.g. one group has full access on CD/DVD while the other has read-only access on CD/DVD. In such cases the most restrictive permissions will be applied.

Finally, select an user/group from AD and run delegate permissions (Right click and delegate) and run the wizard by selecting appropriate permissions. Check the issue now.

Also, run a rsop.msc on the affected computer and see which policy is being applied. This will surely will give you some root cause of the issue.
0
 
techlabtestAuthor Commented:
takecoffe:  Thanks for your reply...But i dont get your point about the link...
The link indicates configuration on a workstation...But i want to do the config through the server not a workstation..Can we do that?

Thanks
0
 
Haresh NikumbhCommented:
you need to configured policy on domain..(group policy which will get apply on workstation )
0
 
techlabtestAuthor Commented:
I think we can't use GPMC on windows server 2003 with sp2...Are there any alternatives?
0
 
Haresh NikumbhCommented:
any reason why we cant use Group policy manager for Windows 2003 serveR?
0
 
techlabtestAuthor Commented:
oups...it works with dotnetframework 1.1...but still does not have any idea where you got the Group Policy Management Editor.
I have installed Group Policy Management but i need the editor...to follow your link...
0
 
Haresh NikumbhCommented:
0
 
techlabtestAuthor Commented:
Is there a difference between Group Policy Management editor and Group policy object editor?
0
 
Haresh NikumbhCommented:
nope both are same
0
 
techlabtestAuthor Commented:
I'm sorry dear....

I don't get your point regarding your answer, especially the link you provide me:

http://www.grouppolicy.biz/2010/01/how-to-use-group-policy-preferences-to-secure-local-administrator-groups/

Thanks
0
 
techlabtestAuthor Commented:
That link look great but it doesn't solve my problem.  May be i have not give you a proper explanation....

i have a domain controller 2003 server with SP2.
I have 3 computers ( win xp, win 7, win 8) with 3 different user name.(X Y Z)
I have already joined the three users to the domain.

But when the three users log on their computer through the domain of course, they don't have access to change time, installed a software, change network configuration, etc etc. i.e they are restricted users.

How to give them full access on their pc?

I don't want to do it on their computer.  I want to do it on the windows server itself for the three users.(domain controller)

Please let me know...

Thanks
0
 
Haresh NikumbhCommented:
I understand your required and based on tht i have given link

if that does not work then try this

You can add a Domain Group to the Local Administrator group by using a login script.

The following example is a example script:

net localgroup "Power Users" Powerusers /add
net localgroup Administrators LocalADM_ALL /add
net localgroup Administrators LocalADM_Computers /add

Net localgroup is the command after that you set the local group and after that you set the domaingroup. If the Local group contains spaces you MUST type the groupname between ".

http://www.techrepublic.com/forum/questions/101-204470/local-admin-rights-for-a-domain-user-on-multiple-computers
0
 
techlabtestAuthor Commented:
Thanks for your reply... Have done it but no response....

According to the link, nobody has been able to do it...

Please help...i urgently need that...

Thanks
0
 
techlabtestAuthor Commented:
net localgroup Administrators "MyDomainname\SecurityGroup" /Add

This works but with administrative privilege.

i want this script to too if the user don't have admin access...

Thanks
0
 
techlabtestAuthor Commented:
partly ok....thanks
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 10
  • 8
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now