Local Administrator Group

[andysk]

Hi,
I have some Windows XPs that both join and unjoin to Windows NT Domain. How do i remotely:
1. Change Local Administrator Password
2. Change All Users that belongs to Administrator Group (both NT Domain and Local Domain Users)
3. Depromote those users (on point 2) to Users Group.

Thanks,
Andy

 

[andysk]

To make it more clear,
I have some Windows XPs that both join and unjoin to Windows NT Domain. How do i remotely:
1. Change Local Administrator Password for those workstations
2. Change All Users that belongs to Administrator Group (both NT Domain and Local Domain Users) for those workstations
3. Depromote those users (on point 2) to Users Group for those workstations.

Thanks,
Andy

 

[linney]

Can you use MMC from a NT 4 Server to remotely manage XP?

Resetting computer accounts in Windows 2000 and Windows XP

http://support.microsoft.com/kb/216393

http://techrepublic.com.com/5208-11190-0.html?forumID=40&threadID=187064

Note (Help and Support article)

A user with a computer administrator account can create or change passwords for all users on the computer. Users with limited accounts can create and change their own passwords, as well as create password hints.


Big Note**************

If a user with a computer administrator account changes the password for another user, that user will lose all EFS-encrypted files, personal certificates, and stored passwords for Web sites or network resources.

EFS, Credentials, and Private Keys from Certificates Are Unavailable After a Password Is Reset

http://support.microsoft.com/kb/290260

 

[andysk]

Thanks a lot linney, are those solutions including for point no. 2 and 3?

 

[linney]

If you can Remotely access the Local User and Groups via MMC, then Yes if the Users are listed on the Local Machine. Otherwise the Domain Server I assume will have a similar listing of Users and Groups. If you expand the listings and right-click on the actual names it will allow you to make changes.

 

[andysk]

Thanks linney, i can use MMC to administrate remote workstation on same subnet (192.168.1.X), but i can't use MMC to administrate remote workstation on different subnet (192.168.2.X). There is no problem using MMC for server on 192.168.2.X. Also there is no problem if i go to the location 192.168.2.X and change my computer IP address to 192.168.2.X. What might be caused? I have check the routers, but there is no blocking ports.
thanks.

 

[linney]

Is 192.168.2.X. being blocked by any firewall or security type program, while 192.168.1.X is allowed to pass through?

If you are attempting to reach another machine from your Workstation and have failed, try running the Workstation in "Safe Mode With Networking" to test if some third party application is causing your problem.

Many anti virus applications nowadays have hidden firewalling components.

Can you use Remote Desktop to communicate with 192.168.2.X?

 

[andysk]

Perhaps can make it more clear. I have 2 subnet networks, 192.168.1.X and 192.168.2.X. and i have PDC Server on 192.168.1.X and BDC Server on 192.168.2.X.
Test 1 : 192.168.1.10 (Win XP) use MMC to 192.168.1.11 (Win XP), success
Test 2 : 192.168.1.10 (Win XP) use MMC to 192.168.2.2 (BDC Server), success
Test 3 : 192.168.1.10 (Win XP) use MMC to 192.168.2.11 (Win XP), unsuccess

Then I go to location of 192.168.2.X, change my IP 192.168.1.10 to 192.168.2.10 and i test again:
Test 4 : 192.168.2.10 (Win XP) use MMC to 192.168.2.11 (Win XP), success
Test 5 : 192.168.2.10 (Win XP) use MMC to 192.168.1.2 (PDC Server), success
Test 6 : 192.168.2.10 (Win XP) use MMC to 192.168.1.11 (Win XP), unsuccess

From above testing, i can summary:
1. Same subnet, no problem
2. Different subnet and MMC to server, no problem
3. Different subnet and MMC to workstation, problem.

I have checked all router, there is no blocking port at all, also there is no firewall activated on both routers.

 

[andysk]

no clue?

 

[linney]

Only the different Subnet when connecting (attempting) between the Workstations.

 

[andysk]

Hi Linney, sorry i don't get your meaning

 

[linney]

What I tried to say in response to your comment of "no clue?", was, unfortunately don't have any idea of what the problem may be, other than "the different Subnet when connecting (attempting) between the Workstations".

 

[andysk]

It's OK linney, very appreciate for your great help until now.