Give user Admin rights on local machine

[amwmsh]

I have been told to give one of our supervisors admin rights on his Windows NT machine to allow him to run Diskeeper Lite, apply Windows updates, change system date/time, etc.

I logged in as administrator and went to local user manager where only 2 account existed Administrator and Guest his account did not show up here not sure why.
I added the user account dXXXXX and added it to the administrator group for that machine.

I logged off and logged back on as the user dXXXXX and still if I try something as simple as clicking on the system time in the status bar it says that I don't have proper permissions to edit the time. Any idea what I have done wrong?

I even went so far as to log on to my NT server and in the user manager for the domain put him in the administrators group (which I don't want to do I want him to just have admin rights to his own machine) but that didn't even work.

Any idea what I have done wrong? I am taking him back out of the domain administrators group on my server but I want to be able to give him local admin rights to his NT box.

Thanks,
Amanda

 

[Renfield]

Hi Amanda,

Open up user manager for domains and find the person you want to give local admin rights to.

Open the user properties box and click groups. You should see a list of all the groups they are not a member of on the right hand side. In there is a group called "Administrators" which has a symbol next to it of two heads in front of a computer, add them to this group.

I think this allows users to act as local admins but not domain admins (Domain wide groups have a globe as part of their icon).

Hope this helps,

Andrew

 

[amwmsh]

Do I have to do this logged on as administrator? I assumed I did b/c I think I can just view this user manager but not change it when logged on as the user.

When I opened it as administrator the only users listed in user manager were Administrator and Guest the actual machine user was no listed in this screen.

I added her as a new user and put her in the Administrator group but that didn't seem to work. I will take another look when I can get some time on her machine.

Any idea why the user account did not show up in the first place when I opened user manager?

Thanks.

 

[wolluf]

You have to add the users DOMAIN account to the LOCAL Adminstrators group, on the local machine, using User Manager (or new localgroup from command line). Open the Administrators group and use the add button. In the drop down box make sure you are listing names from the domain, and just select the one you want.

Don't add them to the Administrator's group on the server - just makes them a local Administrator of the server machine (as opposed to the domain, and certainly not an Administrator of any machines in the domain).

 

[amwmsh]

I finally got this figured out. I was mistakenly adding the user as a new user up at the top portion of user manager when I should have been clicking on the Administrators group at the bottom and just adding his user account to that group.

All is well now thanks everyone for the helpful input.

Amanda