Windows Forum

Ask something
Discussion Locked

BDC Local Admin Rights?

0 helpful
9 replies

by matthewl

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have a BDC and I want a Domain user to log on locally with Admin rights only to that BDC and not Admin rights to the whole network incl PDC .
Is this possible ?

9 replies

by syscokid

Log on to the BDC and run musrmgr.exe, then add the domain account of your choice to the local Administrators group.

That'll give the user local admin rights, but domain rights will be whatever you established in User Manager for Domains.

by matthewl

I have created a local group and added the relevent name but still cant get local admin access .

by culizard

On your PDC, run user manager for domains. Go to User / Select Domain. in the domain field, enter \\BDCNAME. This will bring up the local groups for your BDC. Go to the administrators group, add your domain user, and just like that he's got admin rights.

by matthewl

When you goto User Manager , there is no field to select a Domain. I assume means there is only one Domain its not going to give me that option .
I have added this user to the local user group which allows him to log on but not with Admin rights

by natecasp

No it is not possible. Domain controllers do not have a local security database like member servers do. The only security database and domain that domain controllers use for authentication is the domain database. Since this is replicated to each domain controller there is no way to make a user an admin for one domain controller without making them a admin for the other servers in the domain.

Sorry

by mcclenbw

Sorry, both these answers are wrong. It is impossible. All domain controllers in an NT Domain share the same SAM database. Only the copy on the PDC is writable. All copies on BDCs are ready-only.

Any user/group account changes made while at aBDC is actually made on the PDC. The changes are then passed to all BDCs during syncronization.

I wish this wasn't the case. For you and for me.

by matthewl

This is not what I wanted to hear , but I do believe you are right . This is what I thought , but I was hopeing I was wrong .
Thankyou

This discussion is closed to new replies.