Windows 2003 (active directory) server question
Author
Message
Somehow I got stuck creating user accounts at work. My noobie question is, how do i give admin rights to users?
I didn't even know you could do that.
I hope you can, i'm tired of having to install programs or even change the damn date/time logged as administrator 
when you look at the user's properties there is a tab called 'member of' IIRC.... In that tab, you can make them a member of the Administrator's group, domain administrator's group, or enterprise administrator's group.
BTW, this is not a good policy to employ to all users. One or two is OK. Generally there is no need to give people admin rights on a domain. Usually, most things can be worked around by leaving users in the 'Domain Users' group and making them administrators on their local machines.
BTW, this is not a good policy to employ to all users. One or two is OK. Generally there is no need to give people admin rights on a domain. Usually, most things can be worked around by leaving users in the 'Domain Users' group and making them administrators on their local machines.
| kemble wrote: |
BTW, this is not a good policy to employ to all users. One or two is OK. Generally there is no need to give people admin rights on a domain. Usually, most things can be worked around by leaving users in the 'Domain Users' group and making them administrators on their local machines. |
Just wanted to add 2 people....thanks!!!
Or better yet, use Group policies to dole out individual permissions.
| Frashii wrote: |
Or better yet, use Group policies to dole out individual permissions. |
I love changing peoples wallpaper to something nasty when they don't have the power to change it back
just gave admin rights to 2 users, and they still can't change date/time 
are you inheriting a network from someone else? or did you create the domain? The previous network admin might have security policies in place you are unaware of.....
| kemble wrote: |
are you inheriting a network from someone else? or did you create the domain? The previous network admin might have security policies in place you are unaware of..... |
Inheriting. Where should I look? This is all new to me...
Try this....
This has to be done as 'Administrator'.
On the client computer go to 'Control Panel' --> 'Users & Passwords'.
You should see a list of users. If the person you want to be able to change the time is not listed, click 'Add' , put in their username and domain.
Once the user is added (or was in the list already), highlight the user, and click 'Properties'. In that properties window, choose 'Other' and in the pulldown box to the right, select 'Administrators'.
This has to be done as 'Administrator'.
On the client computer go to 'Control Panel' --> 'Users & Passwords'.
You should see a list of users. If the person you want to be able to change the time is not listed, click 'Add' , put in their username and domain.
Once the user is added (or was in the list already), highlight the user, and click 'Properties'. In that properties window, choose 'Other' and in the pulldown box to the right, select 'Administrators'.
Log onto their machine with your account. Right click on My Computer, then choose Manage, then expand Local Users and Groups, click on Groups, and in the right window double click Administrators. Add the users logon account into the Administrators group. Log off.
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
Log onto their machine with your account. Right click on My Computer, then choose Manage, then expand Local Users and Groups, click on Groups, and in the right window double click Administrators. Add the users logon account into the Administrators group. Log off.
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
When the users logs on, they will have full control to manage and s***w up their own machine (install apps, spyware, etc.)
This will give them complete access to their machine ONLY. You really don't want to give any of these users access on a domain level - only on their local machines. Hope this helps!
I've done it all, even rebooted the damn pc. Still can't change the date/time 
| kemble wrote: |
Try this.... This has to be done as 'Administrator'. On the client computer go to 'Control Panel' --> 'Users & Passwords'. You should see a list of users. If the person you want to be able to change the time is not listed, click 'Add' , put in their username and domain. Once the user is added (or was in the list already), highlight the user, and click 'Properties'. In that properties window, choose 'Other' and in the pulldown box to the right, select 'Administrators'. |
Hi redneck!
Mine is better, and I even held back using the Bart Simpson 'Search Google' picture...
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
Disscusion boards licensed 