Windows Forum

Ask something
Discussion Locked

Security in mixed Win2K Domain

0 helpful
10 replies

by bkubai

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I have recently upgraded on of the servers to Windows 2000. Most of the workstations are also on Windows 2000 Pro. My problem is that while most users can log in using their DOMAIN\username; I cannot add a user to a group Using the Computer Management applet. The first time I try the options in look in are "local computer" and domain(XXX.com). I get an error when I pick a user from the domain. The next time I try the domain option is not available.
How do I make a Domain\user an administrator of their local computer?

10 replies

by usachov

If local user with equal name exists and has membership in local Administartors group, login DOMAIN\username will have Administartive permissions on host. It is not nessesary to include domain account to local group in this case.

by bkubai

I do not want to give user admin rights on the domain. Only admin rights on local computer so that they can install software and printers.

by estebandelatorre

For some reason your machine cannot access the domain.
Go to one of your win2k server, logon with admin rights and then move a user to the domain admins group.
If the server is logged localy, you frist will see local user's database. You need to be authenticated to the doamin in order to perform domain changes.

Hope it helps,

by bkubai

I do not want to give user admin rights on the domain. Only admin rights on local computer so that they can install software and printers.

by bkubai

I only need admin rights on the local computer for adding printers/software and not throughout domain

by jack republic

log in to the computer(localy not to domain)
as administrator or with administrator priveliges and make the user administrator
at the local computer.

by estebandelatorre

Hi! again...

So what you need to do is to log on locally with administrator rights, at the computer you want (select computer name not domain in the logon box), then make the user member of the admin local group.
But..
If you want to make a "domain user" part of the administrator local group of the machine, log on with admin rights into the domain, next switch to the local accounts, and select the user you want from the domain list.
Hope it helps!

This discussion is closed to new replies.