Group Administrators

[PCBrandon]

Hi all,

I have a workstation that is on a domain, and I need to set a domain security group as local administrators on that specific workstation. I can add a domain user as a local administrator, but I need to add a group. I've tried entering them in the following formats, to no go:

GroupName
DOMAIN\GroupName
GroupName@Domain

The workstation is running Windows XP Pro SP2.


Thanks,
Brandon

[DynamicTech]

you cannot add a domain user as a local admin. You have two group types in AD: local and domain. Domain admins automatically have admin privies over local machines within that domain. You will have to work local users locally and domain users on the DC to set admin privies.

[PCBrandon]

I've added tons of domain users as local administrators. The server is running Windows 2000 Advanced Server SP4. To add a domain user as a local admin you'd just go to (on the workstation):

Start > Run > control userpasswords

Then add a user, type the username in the appropriate field, the domain in the appropriate field, then on the next screen you can select Administrator from the drop down menu. I know this works, because we have several programs that require a domain user to be a local administrator to work properly.


Anyways, I don't really need to know the answer to this now. I only needed to know it because a select group of people needed to be local admins on a single workstation to allow Adobe PageMaker to access and modify registry keys. However, I found a solution on the Adobe website (imagine that).

[DynamicTech]

whoa, our XP instructor taught us that could not be done. That admin privies had to be granted at the local or domain level. Thanks for the info.