Win7 local admin rights on domain ?

Forums › Microsoft Windows › Win7 local admin rights on domain ?

xpd

Geek of Coastguard
14116 posts

Uber Geek
+1 received by user: 4579

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#41122 10-Sep-2009 12:28

Probably something simple but Im tired and my brain isnt working at its best (not that its much better when im refreshed :) )

Installed Windows 7 Enterprise - setup account etc, running fine.
I then join the domain (2003 based) - computer joins fine and I can log in.

But whenever I want to make changes I get the cursed UAC prompting me for admin password all the time - now, I dont have the domain admin password so I try the local admin (my original user account) one and it seems to let me through the UAC but then fails to remember any changes Ive made - such as making Firefox the default web browser.

Checked my local account has admin membership........... under XP I had no issues - added myself as local admin and I was away....

What am I missing ?

XPD / Gavin

LinkTree

tonyhughes

Hawkes Bay
8476 posts

Uber Geek
+1 received by user: 6

Retired Mod

Trusted

Lifetime subscriber

#254722 10-Sep-2009 12:36

To get local admin rights while joined to the domain, you should theoretically need the domain admin password... so if you don't, therein lies your problem.

xpd

Geek of Coastguard
14116 posts

Uber Geek
+1 received by user: 4579

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#254734 10-Sep-2009 13:02

To make changes to the local system however, you should only require local admin rights. Which is how XP works....

Looks like 7 reqs a little bit more tinkering to get it sorted... turns out even though my local account was in the Administrators group, it was being ignored and I was in the "Homeusers" group as well in the standard Windows users control panel. Changed to Administrator and things seem to be going a bit smoother now...altho I still get prompted for admin login etc, I can just use my local one and it works :)

Bit frustrating but secure :)

XPD / Gavin

LinkTree

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#254770 10-Sep-2009 14:49

if you login as the actual domain administrator you dont get the UAC. if you log in as a user with domain, or local, admin rights then you do get the UAC. Usually you just click through it and things work. sometimes though, you may need to choose "run as administrator" on programs (and then click the UAC prompts) to make things work 'as admin'.

something i tend to do is create a shortcut to cmd prompt with 'run as administrator' set in the properties. Now whenever i want to do something admin-like i launch it from that command window. If you dont know the cmd's or shortcuts though this can b a pain

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs

Adamal

544 posts

Ultimate Geek

#254806 10-Sep-2009 16:36

net localgroup "administrators " "(Your domain name here)\domain users" /add

That will add the 'Domain Users' group associated to your domain to the Local Administrators group.
You'll need to be logged in as a domain admin (who are added to the Local Administrator group by default) or a local admin to add it though.

Regs

4066 posts

Uber Geek
+1 received by user: 206

Trusted

Snowflake

#254872 10-Sep-2009 20:39

xpd:
Checked my local account has admin membership........... under XP I had no issues - added myself as local admin and I was away....

Adamal: net localgroup "administrators " "(Your domain name here)\domain users" /add

That will add the 'Domain Users' group associated to your domain to the Local Administrators group.
You'll need to be logged in as a domain admin (who are added to the Local Administrator group by default) or a local admin to add it though.

its not a problem with the user not having local admin - its something to do with the rights of the original administrator user or original domain administrator user being greater than those of a user who has simply been granted admin via group membership. the "administrator" users get no prompts while the "user with admin role" does get prompted. Was happening in vista too.

Sales Engineer
Snowflake
www.snowflake.com

about.me/nzregs
Twitter: @nzregs