AD admin rights not applied early enough for Windows Activation

[kubaton]

I have a problem where an Active Directory user is in a group that's
been given local administrator rights.

He can image the machine off our RIS server and after it reboots he
logs into the domain. Then the Windows Activation pops up an error that
he needs to be logged-in as an admin to activate this copy of Windows.

He will be logged-in as an admin if the domain were given a chance to
add his group to the list of local administrators. But it looks like
Windows Activation is preventing that.

Do I have the logic right? Is there a way to fix this so that the
domain will give him access rights and then let him activate?

TIA
_Pilgrim


PS. if there's another group that would be a more appropriate place to
post this just let me know, thanks.

 

[Kerry Brown]

I have a problem where an Active Directory user is in a group that's
been given local administrator rights.

He can image the machine off our RIS server and after it reboots he
logs into the domain. Then the Windows Activation pops up an error that
he needs to be logged-in as an admin to activate this copy of Windows.

He will be logged-in as an admin if the domain were given a chance to
add his group to the list of local administrators. But it looks like
Windows Activation is preventing that.

Do I have the logic right? Is there a way to fix this so that the
domain will give him access rights and then let him activate?

Pick the option to activate later. Do whatever you have to do then activate.

Kerry

 

[kubaton]

I can't choose that option. Since we're imaging off a server, hundreds
of machines have used the same image. The 30 day grace period is long
over.

 

[Kerry Brown]

I can't choose that option. Since we're imaging off a server, hundreds
of machines have used the same image. The 30 day grace period is long
over.

You should have used sysprep before making the image. I have heard there's a
way around this but I can't find it with a quick google. Looks like you'll
have to phone Microsoft or redo the image properly with sysprep.

Just kidding. Can't you log in with the local admin account, activate, then
join the domain? If need be you could reset the local admin password with a
Linux boot CD.

Kerry

 

[Leythos]

You should have used sysprep before making the image. I have heard there's a
way around this but I can't find it with a quick google. Looks like you'll
have to phone Microsoft or redo the image properly with sysprep.

He should have used a Volume License version.

 

[Kerry Brown]

He should have used a Volume License version.

Sometimes it's hard to explain to the bean counters that a VL saves money in
the long run. All they see is cheap Dells that include the OS.

Kerry