asked on chane user priveledge in Server 2008
Hello Experts
I have a user who is a standard user on her domain. She needs to be an administrator. I can see (in Active Directory) how to move her to the administrator group, but this doesn't seem to change her privilege.
Can you help me out?
thedslguy
I have a user who is a standard user on her domain. She needs to be an administrator. I can see (in Active Directory) how to move her to the administrator group, but this doesn't seem to change her privilege.
Can you help me out?
thedslguy
Windows Server 2008
Last Comment
Tej
Why not create another user account that is a domain admin and let her use that when needed?
ASKER
BillBondo
I tried this sbefore and it was a hassle because she had to change profiles multimes a day.
Is there a wway to change her profile to administrator?
tdg
I tried this sbefore and it was a hassle because she had to change profiles multimes a day.
Is there a wway to change her profile to administrator?
tdg
She cant use the "Run As" feature? Can you add her to the admin group? Not sure what you mean by move her to admin group. What is she trying to accomplish? UAC should also ask for creds.
ASKER
Bill Bondo
I was able to resolve the issue through another means.
It turns out it was a file permission problem on the local machine.
I am going to withdraw the question unless you object.
Thanks
thedslguy
I was able to resolve the issue through another means.
It turns out it was a file permission problem on the local machine.
I am going to withdraw the question unless you object.
Thanks
thedslguy
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
To reassert Bill's recommendation. This is a better practice to follow for many reasons.
First and for most more secure. If this user is logged with Admin rights all the time and she does step away from her computer someone that know this account is a high level account and want to do some damage they can. Now if she is logged on as standard user all the time and only uses the admin account to run elevated privilege things when prompted lower risk footprint.
Security and privileges are not alway and should not be a thing of convenience.
If you want to have convenience and you do not care just add her to your Domain Admin group. What is your need for her to be an admin? Is it for Domain Administration or managing local workstations? There might be other options like make here a PowerUser on all workstations.
First and for most more secure. If this user is logged with Admin rights all the time and she does step away from her computer someone that know this account is a high level account and want to do some damage they can. Now if she is logged on as standard user all the time and only uses the admin account to run elevated privilege things when prompted lower risk footprint.
Security and privileges are not alway and should not be a thing of convenience.
If you want to have convenience and you do not care just add her to your Domain Admin group. What is your need for her to be an admin? Is it for Domain Administration or managing local workstations? There might be other options like make here a PowerUser on all workstations.
If that user needs to be an administrator for particular user than add that user in Local admin group. You can achieve that by adding the user maunally to local admin of that particular server else the other option will be through group policy.
Note: You can't add user to Local administrator group on DC.
Note: You can't add user to Local administrator group on DC.