Local Admin Grp - Access Denied

[SJMP]

I am a domain admin. a XP machine that is a domain member pc will not let me
add my account in the local administrators group. I have domain admin rights.
Any ideas?

 

[berneAI]

I am a domain admin. a XP machine that is a domain member pc will not let me
add my account in the local administrators group. I have domain admin rights.
Any ideas?

Domain Admin does not automatically give you local admin rights. you
need to log into the machine as a local admin, either through the
default admin account or a user account with local admin rights. It
can be a little confusing but in XP/Vista world being a system or
domain admin does not automatically give you local admin rights.

 

[SJMP]

Thanks BerneAI

The thing is, I had local admin rights. my account was in there. Then all of
a sudden when I log in it was telling me that it couldnt load a dll since I
was not a administrator. But a domain admin should be able to add local
admins to a machine on that domain. It always has.

 

[David Shen [MSFT]]

Hello sjmp,

Thank you for posting in newsgroup.

According to the description, the issue seems to be related to
administrator rights. If I have any misunderstanding, please feel free to
let me know.

Based on the research, here is some information which may helpful for you.

Analysis and Suggestions:
=======================

What you said is right. When we logon a domain client with domain
administrator, the domain administrator automatically have the local
admin's right on the domain computer. Please verify that you add the domain
user account to the local administrator group on the domain computer with
logon as both local administrator and domain administrator.

It seems that you couldn't load a DLL since you are not an administrator,
can you tell me the exact name of the problematic DLL file? What is the
exact error? Please let us know the error WORD BY WORD.

Also, can you view any error message in Event viewer?

Hope it helps.

I wait for your reply.

David Shen
Microsoft Online Partner Support

 

[SJMP]

Thanks David.

My domain account is a domain admin group member. I have never had this
problem before and I have added domain users to the local admin group with
the account for years.

I finally just logged in as local admin and made the change. But still do
not know why there was a change.

IF I wanted to look through the logs on my DC's what could I search for to
see if my account permissions had been modified.

Thanks,

 

[David Shen [MSFT]]

Hello sjmp,

Thanks for your reply.

To narrow down the root cause of the issue, can you please tell me if the
issue occurs on the only one Windows XP client or the other domain clients?

To monitor the process when you try to add your account in the local
administrators group, please refer to following steps:

1. Download the Process Monitor v1.33 from following link.
http://technet.microsoft.com/en-us/sysinternals/bb896645.aspx

2. Copy it to the problematic computer and run it locally in real-time.

3. Try to add your account in the local administrators group to reproduce
the same issue as you descript (it couldn't load a DLL since I
was not a administrator)

4. At the same time, click on the save button to save the current monitored
process as a file in the Process Monitor. Please verify the option as
follow:

Events to save: Events displayed using current filter

Format: Native Process Monitor Format (PML)

You may send the .pml file to (e-mail address removed)

Hope it helps.

I wait for your reply. Thanks.

David Shen
Microsoft Online Partner Support

 

[SJMP]

I did it again and the problem has ceased. I will still send the .pml file to
you.

 

[David Shen [MSFT]]

Hello sjmp,

I am just writing to see how everything is going. If you have any updates
or need any further assistance on this issue, please feel free to let me
know. I am glad to be of assistance.

David Shen
Microsoft Online Partner Support