?
Solved

domain user in local server admin group doesn't have right.

Posted on 2014-12-18
9
Medium Priority
?
166 Views
Last Modified: 2015-01-02
I have user domain that added to local server admin group. I want specific user able to manage that server only not domain.

problem is, even user is in admin group, it still get error when try to install software.  any idea how to fix it?
0
Comment
Question by:ajeab
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +2
9 Comments
 
LVL 6

Expert Comment

by:JeffG2583
ID: 40508135
Try running this command

net localgroup administrators /add domain\user

and replace domain\user with the domain name and username you want to make a local admin, then give the software install a try.
0
 
LVL 6

Author Comment

by:ajeab
ID: 40508142
how is this different from right click my computer --> manage --> local users and groups --> groups --> administrators --> add --> domain\user?
0
 
LVL 34

Expert Comment

by:it_saige
ID: 40508150
There may be a policy in affect that is preventing the software from installing.  Have you ran the Resultant Set of Policy on the username to see which policies would be enacted on the server?

-saige-
0
Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

 
LVL 6

Author Comment

by:ajeab
ID: 40508161
there is no policy to prevent software install if user have right.  for ex: when I login under my login name (member of domain admin) I can install it as well as login using local administrator.  but when user B. which part of local server administrators group (just domain user) User B can't install software.
0
 
LVL 34

Expert Comment

by:it_saige
ID: 40508171
Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world.  So explicitly marking a group as Denied in secpol or group policy will affect installing software if the user is a member of the group in question.

-saige-
0
 
LVL 34

Accepted Solution

by:
it_saige earned 1500 total points
ID: 40508179
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 40508218
Why dont you look over this method ?

Managing Client Machine Local Admin Rights

http://blogs.technet.com/b/dougga/archive/2012/02/04/3452533.aspx
0
 
LVL 56

Expert Comment

by:McKnife
ID: 40508349
"it still get error"... "User B can't install software"... ->What error do you get?
@IT Saige
"Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world" - not true. Especially not with software restriction policies.
0
 
LVL 56

Expert Comment

by:McKnife
ID: 40528536
What was the solution?
0

Featured Post

Three Reasons Why Backup is Strategic

Backup is strategic to your business because your data is strategic to your business. Without backup, your business will fail. This white paper explains why it is vital for you to design and immediately execute a backup strategy to protect 100 percent of your data.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
Suggested Courses
Course of the Month10 days, 16 hours left to enroll

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question