Attempting an install of software that requires Local
Administrator rights while logging onto the network.

O/S -- PC with Windows XP Professional, a server with
2003 Server, and myriad other servers in a domain...

I thought that when you create a Local Administrator user
on a workstation, with the same username and password as
on the domain, it would authenticate the user in the
domain, while allowing the Local Administrator
privileges. This doesn't appear to be the case.

Every time I log into the domain with the username and
password (which is the same username and password on the
PC (as a Local Administrator) as in the domain (I'm not
sure what rights/privileges are given)), I receive an
error during the install stating that I didn't have
sufficient rights. When I go into Local Users and
Groups, I am unable to change or add anything. If I log
out of the domain and into "this PC", I am able to alter
Local Users and Groups, but then I am not on the network
as an authenticated user...

How do I accomplish making the network user login a Local
Administrator on the PC?

Re: How do I make a network user login a Local Administrator? by Steven

Steven
Wed Aug 25 23:24:55 CDT 2004

If that is what you really want to do, add the users domain account to the local
administrators group on their computer. --- Steve


"L Davis" <anonymous@discussions.microsoft.com> wrote in message
news:052a01c48b20$2c903880$a301280a@phx.gbl...
> Attempting an install of software that requires Local
> Administrator rights while logging onto the network.
>
> O/S -- PC with Windows XP Professional, a server with
> 2003 Server, and myriad other servers in a domain...
>
> I thought that when you create a Local Administrator user
> on a workstation, with the same username and password as
> on the domain, it would authenticate the user in the
> domain, while allowing the Local Administrator
> privileges. This doesn't appear to be the case.
>
> Every time I log into the domain with the username and
> password (which is the same username and password on the
> PC (as a Local Administrator) as in the domain (I'm not
> sure what rights/privileges are given)), I receive an
> error during the install stating that I didn't have
> sufficient rights. When I go into Local Users and
> Groups, I am unable to change or add anything. If I log
> out of the domain and into "this PC", I am able to alter
> Local Users and Groups, but then I am not on the network
> as an authenticated user...
>
> How do I accomplish making the network user login a Local
> Administrator on the PC?
>



Re: How do I make a network user login a Local Administrator? by Roger

Roger
Thu Aug 26 03:49:18 CDT 2004

The strategy of matching accounts you described sometimes
is of use in a workgroup environment for network access.
In a domain, or for local login, you should follow Steve's advise
and make the domain account a member of the machine's
Administrators group (best only as a temporary measure) or
better have them log in with a machine local admin account and
then map the network drive or start | run the \\unc with their plain
user domain account in order to get access to the installable.

--
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCDBA, MCSE W2k3+W2k+Nt4
"L Davis" <anonymous@discussions.microsoft.com> wrote in message
news:052a01c48b20$2c903880$a301280a@phx.gbl...
> Attempting an install of software that requires Local
> Administrator rights while logging onto the network.
>
> O/S -- PC with Windows XP Professional, a server with
> 2003 Server, and myriad other servers in a domain...
>
> I thought that when you create a Local Administrator user
> on a workstation, with the same username and password as
> on the domain, it would authenticate the user in the
> domain, while allowing the Local Administrator
> privileges. This doesn't appear to be the case.
>
> Every time I log into the domain with the username and
> password (which is the same username and password on the
> PC (as a Local Administrator) as in the domain (I'm not
> sure what rights/privileges are given)), I receive an
> error during the install stating that I didn't have
> sufficient rights. When I go into Local Users and
> Groups, I am unable to change or add anything. If I log
> out of the domain and into "this PC", I am able to alter
> Local Users and Groups, but then I am not on the network
> as an authenticated user...
>
> How do I accomplish making the network user login a Local
> Administrator on the PC?
>