chane user priveledge in Server 2008

thedslguy
thedslguy used Ask the Experts™
on
Hello Experts

I have a user who is a standard user on her domain.  She needs to be an administrator.  I can see (in Active Directory) how to move her to the administrator group, but this doesn't seem to change her privilege.

Can you help me out?

thedslguy
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Why not create another user account that is a domain admin and let her use that when needed?
thedslguyComputer and Network Consultant

Author

Commented:
BillBondo

I tried this sbefore and it was a hassle because she had to change profiles multimes a day.

Is there a wway to change her profile to administrator?

tdg
She cant use the "Run As" feature? Can you add her to the admin group? Not sure what you mean by move her to admin group. What is she trying to accomplish? UAC should also ask for creds.
Amazon Web Services

Are you thinking about creating an Amazon Web Services account for your business? Not sure where to start? In this course you’ll get an overview of the history of AWS and take a tour of their user interface.

thedslguyComputer and Network Consultant

Author

Commented:
Bill Bondo

I was able to resolve the issue through another means.

It turns out it was a file permission problem on the local machine.

I am going to withdraw the question unless you object.

Thanks

thedslguy
I dont object but your Q? was vague and why I asked what it was she was trying to accomplish. You did ask how to make her admin and I did answer that plus other ideas. I would appreciate the points. Thanks
yo_beeDirector of Information Technology

Commented:
To reassert Bill's recommendation.  This is a better practice to follow for many reasons.
First and for most more secure.  If this user is logged with Admin rights all the time and she does step away from her computer someone that know this account is a high level account and want to do some damage they can.  Now if she is logged on as standard user all the time and only uses the admin account to run elevated privilege things when prompted lower risk footprint.

Security and privileges are not alway and should not be a thing of convenience.

If you want to have convenience and you do not care just add her to your Domain Admin group.  What is your need for her to be an admin?  Is it for Domain Administration or managing local workstations?  There might be other options like make here a PowerUser on all workstations.
Tej

Commented:
If that user needs to be an administrator for particular user than add that user in Local admin group. You can achieve that by adding the user maunally to local admin of that particular server else the other option will be through group policy.

Note: You can't add user to Local administrator group on DC.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial