Local Admin Access

[Protheus]

Hi all,

I have a vista machine - add the machine to the domain. the next tyhing I do is add certain groups to the local admin group on the machine.

I shutdown and restart the machine and then take out the network cable. Switch wifi on. When I logon again I connect to the wifi we have here but the problem is thatin the local administrators group the groups that I added from the domain are not available so those people in those group do not have local admin access. This happens also with users

How do I fix this so that when I startup a machine that is not connected to the netwok the user that is logging on has local admin access ?

Regards.

 

[linney]

Can you logon to the local workstation as an Administrator (select under Domain "This Workstation") and set up the local users?

 

[Protheus]

yes that I can do. I logged in as admin, Added a group called Test Users to the local Administrators group and then I login normally.

But again when I disconnect the cable and login the Test Users do not have local admin access.. very weird !

 

[linney]

In Vista, Administrators are run with the Privileges of a Standard User. The UAC is set up to prompt for Elevated Privileges when and if required. Is this what you are seeing, or are you saying the Test Group is not listed under the Security Tab, or in the Group listing?

Is it even possible (via locally) to add a Group to the Administrators Group, I thought you could only add users by name to the Administrators Group?

Built-in Administrator Account Disabled

http://blogs.msdn.com/windowsvistasecurity/archive/2006/08/27/windowsvistasecurity_.aspx

If UAC is a hindrance to you it is possible to disable it, this is not recommended however.