Windows Forum

Ask something
Discussion Locked

local/domain user rights

0 helpful
9 replies

by chipw

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have around 40 users on my network, all have domain user logins of course, and their workstations are NT4 boxes on which they do not have a local login. The only local login is the admin account used to set up the machines. How do I give a particular person local admin rights to their machine without affecting their domain login? I guess this means having user-priveleges on the network AND local-admin rights at the same time, is this possible?

9 replies

by jmarraffino

Yes, it is possible. Log onto their machine as the administrator. Open the local user manager and go to groups. Open the administrator's group and add their username (the same username they have on the domain) into the group. Log off and then logon to the machine (not the domain) as the user. The user will have admin rights.

by bohicam1

I think what you are after is having a domain user having administrator rights to the local machine while maintaining domain user rights on the network...all while logged into a machine. In order to do this you will need to have netbeui installed onboth the server and on the workstation in question. Once that is done, you may log into the local workstation as administrator(not the domain), as administrator, add the domain account of the user to the local admins group. This way the user can perform both functions from one account.
Good luck!

Mike

by rsp

If I read your question right, both answers 1 and 2 are only partially correct each. Combining the two gives you a neater solution:

Open User Manager (musrmgr.exe) on the local machine whilst logged in as Administrator and Add the user in question to the Administrators group. That's it. No faffing with two accounts and synchronised passwords, or installing protocols that you don't need.

Alternatively, if you don't want to walk around to each machine, start User Manager for Domains on yourserver, and for each machine, do User/Select Domain, enter \\machinename, and you're effectively running User Manager on that machine.

Regards

Richard

by chipw

Thanks to all for the answers, this took care of the problem, which is only for 1 or 2 individuals in the company. We don't want eveyone having admin rights to the local machine - causes too many headaches when they start installing non-authorized apps - especially certain 'desktop enhancements' which cause more problems by just existing in the file system.

by uffe.sommerlund

Best solution

If all 40 users need local admin right:
create a Global group on the Server (PDC) give them the right to log on locally and asign the users.

This discussion is closed to new replies.