I have a user who is a standard user on her domain. She needs to be an administrator. I can see (in Active Directory) how to move her to the administrator group, but this doesn't seem to change her privilege.
Can you help me out?
thedslguy
Windows Server 2008
Last Comment
Tej
8/22/2022 - Mon
BillBondo
Why not create another user account that is a domain admin and let her use that when needed?
thedslguy
ASKER
BillBondo
I tried this sbefore and it was a hassle because she had to change profiles multimes a day.
Is there a wway to change her profile to administrator?
tdg
BillBondo
She cant use the "Run As" feature? Can you add her to the admin group? Not sure what you mean by move her to admin group. What is she trying to accomplish? UAC should also ask for creds.
To reassert Bill's recommendation. This is a better practice to follow for many reasons.
First and for most more secure. If this user is logged with Admin rights all the time and she does step away from her computer someone that know this account is a high level account and want to do some damage they can. Now if she is logged on as standard user all the time and only uses the admin account to run elevated privilege things when prompted lower risk footprint.
Security and privileges are not alway and should not be a thing of convenience.
If you want to have convenience and you do not care just add her to your Domain Admin group. What is your need for her to be an admin? Is it for Domain Administration or managing local workstations? There might be other options like make here a PowerUser on all workstations.
Tej
If that user needs to be an administrator for particular user than add that user in Local admin group. You can achieve that by adding the user maunally to local admin of that particular server else the other option will be through group policy.
Note: You can't add user to Local administrator group on DC.