|
|
| Author |
Message |
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
 Posted: 06/02/04 - 13:07 Post subject: Windows 2003 (active directory) server question
|
|
|
|
Somehow I got stuck creating user accounts at work. My noobie question is, how do i give admin rights to users?
|
|
|
Back to top
|
|
|
|
 |
Mugaaz
RealPoor Guru
Joined: 16 Oct 2002
Posts: 3576
|
|
Posted: 06/02/04 - 13:10 Post subject:
|
|
|
|
I didn't even know you could do that.
|
|
|
Back to top
|
|
|
|
|
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
|
Posted: 06/02/04 - 13:13 Post subject:
|
|
|
I hope you can, i'm tired of having to install programs or even change the damn date/time logged as administrator 
|
|
|
Back to top
|
|
|
|
|
kemble
RealPoor Sensei
Joined: 14 Oct 2002
Posts: 1912
Location: MI
|
|
Posted: 06/02/04 - 13:16 Post subject:
|
|
|
when you look at the user's properties there is a tab called 'member of' IIRC.... In that tab, you can make them a member of the Administrator's group, domain administrator's group, or enterprise administrator's group.
BTW, this is not a good policy to employ to all users. One or two is OK. Generally there is no need to give people admin rights on a domain. Usually, most things can be worked around by leaving users in the 'Domain Users' group and making them administrators on their local machines.
|
|
|
Back to top
|
|
|
|
|
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
|
Posted: 06/02/04 - 13:33 Post subject:
|
|
|
| kemble wrote: |
BTW, this is not a good policy to employ to all users. One or two is OK. Generally there is no need to give people admin rights on a domain. Usually, most things can be worked around by leaving users in the 'Domain Users' group and making them administrators on their local machines. |
Just wanted to add 2 people....thanks!!!
|
|
|
Back to top
|
|
|
|
|
Frashii
Sir Postalot
Joined: 11 Oct 2002
Posts: 1329
Location: Anchorage, AK
|
|
Posted: 06/02/04 - 13:35 Post subject:
|
|
|
|
Or better yet, use Group policies to dole out individual permissions.
|
|
|
Back to top
|
|
|
|
|
kemble
RealPoor Sensei
Joined: 14 Oct 2002
Posts: 1912
Location: MI
|
|
Posted: 06/02/04 - 13:41 Post subject:
|
|
|
| Frashii wrote: | | Or better yet, use Group policies to dole out individual permissions. |
I love changing peoples wallpaper to something nasty when they don't have the power to change it back 
|
|
|
Back to top
|
|
|
|
|
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
|
Posted: 06/02/04 - 14:00 Post subject:
|
|
|
just gave admin rights to 2 users, and they still can't change date/time 
|
|
|
Back to top
|
|
|
|
|
kemble
RealPoor Sensei
Joined: 14 Oct 2002
Posts: 1912
Location: MI
|
|
Posted: 06/02/04 - 14:15 Post subject:
|
|
|
|
are you inheriting a network from someone else? or did you create the domain? The previous network admin might have security policies in place you are unaware of.....
|
|
|
Back to top
|
|
|
|
|
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
|
Posted: 06/02/04 - 14:27 Post subject:
|
|
|
| kemble wrote: | | are you inheriting a network from someone else? or did you create the domain? The previous network admin might have security policies in place you are unaware of..... |
Inheriting. Where should I look? This is all new to me...
|
|
|
Back to top
|
|
|
|
|
kemble
RealPoor Sensei
Joined: 14 Oct 2002
Posts: 1912
Location: MI
|
|
Posted: 06/02/04 - 15:14 Post subject:
|
|
|
Try this....
This has to be done as 'Administrator'.
On the client computer go to 'Control Panel' --> 'Users & Passwords'.
You should see a list of users. If the person you want to be able to change the time is not listed, click 'Add' , put in their username and domain.
Once the user is added (or was in the list already), highlight the user, and click 'Properties'. In that properties window, choose 'Other' and in the pulldown box to the right, select 'Administrators'.
|
|
|
Back to top
|
|
|
|
|
Batugan
Total Newbie
Joined: 17 Oct 2002
Posts: 33
|
|
Posted: 06/02/04 - 15:38 Post subject:
|
|
|
Log onto their machine with your account. Right click on My Computer, then choose Manage, then expand Local Users and Groups, click on Groups, and in the right window double click Administrators. Add the users logon account into the Administrators group. Log off.
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
|
|
|
Back to top
|
|
|
|
|
Batugan
Total Newbie
Joined: 17 Oct 2002
Posts: 33
|
|
Posted: 06/02/04 - 16:06 Post subject:
|
|
|
Log onto their machine with your account. Right click on My Computer, then choose Manage, then expand Local Users and Groups, click on Groups, and in the right window double click Administrators. Add the users logon account into the Administrators group. Log off.
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
|
|
|
Back to top
|
|
|
|
|
fompea
Can't Stop Posting
Joined: 16 Oct 2002
Posts: 650
Location: Las Vegas
|
|
Posted: 06/02/04 - 16:41 Post subject:
|
|
|
I've done it all, even rebooted the damn pc. Still can't change the date/time 
|
|
|
Back to top
|
|
|
|
|
Frashii
Sir Postalot
Joined: 11 Oct 2002
Posts: 1329
Location: Anchorage, AK
|
|
|
Back to top
|
|
|
|
|
Confused
RealPoor Master of Posts
Joined: 08 Feb 2004
Posts: 6730
|
|
Posted: 06/02/04 - 17:52 Post subject:
|
|
|
| kemble wrote: | Try this....
This has to be done as 'Administrator'.
On the client computer go to 'Control Panel' --> 'Users & Passwords'.
You should see a list of users. If the person you want to be able to change the time is not listed, click 'Add' , put in their username and domain.
Once the user is added (or was in the list already), highlight the user, and click 'Properties'. In that properties window, choose 'Other' and in the pulldown box to the right, select 'Administrators'. |
Hi redneck!
|
|
|
Back to top
|
|
|
|
|
Frashii
Sir Postalot
Joined: 11 Oct 2002
Posts: 1329
Location: Anchorage, AK
|
|
Posted: 06/02/04 - 17:55 Post subject:
|
|
|
Mine is better, and I even held back using the Bart Simpson 'Search Google' picture...
|
|
|
Back to top
|
|
|
|
|
|
|
