domain user in local server admin group doesn't have right.

I have user domain that added to local server admin group. I want specific user able to manage that server only not domain.

problem is, even user is in admin group, it still get error when try to install software.  any idea how to fix it?
LVL 6
ajeabAsked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
JeffG2583Commented:
Try running this command

net localgroup administrators /add domain\user

and replace domain\user with the domain name and username you want to make a local admin, then give the software install a try.
0
 
ajeabAuthor Commented:
how is this different from right click my computer --> manage --> local users and groups --> groups --> administrators --> add --> domain\user?
0
Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

 
it_saigeDeveloperCommented:
There may be a policy in affect that is preventing the software from installing.  Have you ran the Resultant Set of Policy on the username to see which policies would be enacted on the server?

-saige-
0
 
ajeabAuthor Commented:
there is no policy to prevent software install if user have right.  for ex: when I login under my login name (member of domain admin) I can install it as well as login using local administrator.  but when user B. which part of local server administrators group (just domain user) User B can't install software.
0
 
it_saigeDeveloperCommented:
Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world.  So explicitly marking a group as Denied in secpol or group policy will affect installing software if the user is a member of the group in question.

-saige-
0
 
Donald StewartNetwork AdministratorCommented:
Why dont you look over this method ?

Managing Client Machine Local Admin Rights

http://blogs.technet.com/b/dougga/archive/2012/02/04/3452533.aspx
0
 
McKnifeCommented:
"it still get error"... "User B can't install software"... ->What error do you get?
@IT Saige
"Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world" - not true. Especially not with software restriction policies.
0
 
McKnifeCommented:
What was the solution?
0
All Courses

From novice to tech pro — start learning today.