Solved

domain user in local server admin group doesn't have right.

Posted on 2014-12-18
9
142 Views
Last Modified: 2015-01-02
I have user domain that added to local server admin group. I want specific user able to manage that server only not domain.

problem is, even user is in admin group, it still get error when try to install software.  any idea how to fix it?
0
Comment
Question by:ajeab
  • 3
  • 2
  • 2
  • +2
9 Comments
 
LVL 6

Expert Comment

by:JeffG2583
ID: 40508135
Try running this command

net localgroup administrators /add domain\user

and replace domain\user with the domain name and username you want to make a local admin, then give the software install a try.
0
 
LVL 6

Author Comment

by:ajeab
ID: 40508142
how is this different from right click my computer --> manage --> local users and groups --> groups --> administrators --> add --> domain\user?
0
 
LVL 33

Expert Comment

by:it_saige
ID: 40508150
There may be a policy in affect that is preventing the software from installing.  Have you ran the Resultant Set of Policy on the username to see which policies would be enacted on the server?

-saige-
0
 
LVL 6

Author Comment

by:ajeab
ID: 40508161
there is no policy to prevent software install if user have right.  for ex: when I login under my login name (member of domain admin) I can install it as well as login using local administrator.  but when user B. which part of local server administrators group (just domain user) User B can't install software.
0
Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

 
LVL 33

Expert Comment

by:it_saige
ID: 40508171
Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world.  So explicitly marking a group as Denied in secpol or group policy will affect installing software if the user is a member of the group in question.

-saige-
0
 
LVL 33

Accepted Solution

by:
it_saige earned 500 total points
ID: 40508179
0
 
LVL 47

Expert Comment

by:Donald Stewart
ID: 40508218
Why dont you look over this method ?

Managing Client Machine Local Admin Rights

http://blogs.technet.com/b/dougga/archive/2012/02/04/3452533.aspx
0
 
LVL 53

Expert Comment

by:McKnife
ID: 40508349
"it still get error"... "User B can't install software"... ->What error do you get?
@IT Saige
"Don't forget that Deny *always* takes precedence over allowed rights in the Microsoft world" - not true. Especially not with software restriction policies.
0
 
LVL 53

Expert Comment

by:McKnife
ID: 40528536
What was the solution?
0

Featured Post

Make managing Office 365 email signatures a breeze

Are you using Office 365? Having trouble trying to set up email signatures for your users? Getting stressed out managing multiple signatures? Need an easier way to manage? We have a solution for you, try the most-user friendly and powerful signature management tool on the market.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Server HP DL380 G7 13 43
Read-only access for auditors 5 66
Server 2012 R2 missing roles and features 2 66
Propagate Applocker rules to all laptops/PCs in the domain 10 24
Some time ago I faced the need to use a uniform folder structure that spanned across numerous sites of an enterprise to be used as a common repository for the Software packages of the Configuration Manager 2007 infrastructure. Because the procedu…
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This is a video describing the growing solar energy use in Utah. This is a topic that greatly interests me and so I decided to produce a video about it.

929 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now