administrating workgroup from domain

[Guest]

How can I set up a workgroup on our network that I can administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain. But
still leave the workgroup/user not able to share/use domain resources.

 

[Alvin Brown]

Hello

Well you need to talk to your IT Staff and have them grant you
admin access rights.

Alvin

 

[Guest]

Hello

Well you need to talk to your IT Staff and have them grant you
admin access rights.

Alvin

 

[Guest]

Let me rephrase. I have admin status on our network on our domain. I also
have adminstrative rights on each machine locally. I admin about 275 machines
on the domain. I do not seem to be able to remote administer the workgroup
machines through the network. Connectivity is there, but there seems to be a
security or permissions setting I am missing.

 

[Richard G. Harper]

You can't. The reason you can administer a domain is because the security
settings are centrally held. On a workgroup each workstation keeps its own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

 

[Guest]

Shouldn't there be some way of validating an administrator on the remote
machine locally?

You can't. The reason you can administer a domain is because the security
settings are centrally held. On a workgroup each workstation keeps its own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

How can I set up a workgroup on our network that I can administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain. But
still leave the workgroup/user not able to share/use domain resources.

 

[Richard G. Harper]

An administrator on a remote PC may not be an administrator on the local PC.
The account names, passwords and rights must match between all clients for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Shouldn't there be some way of validating an administrator on the remote
machine locally?

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain. But
still leave the workgroup/user not able to share/use domain resources.

 

[Guest]

I am not work this work this week so I can't try this. But seeing as I have
an local admin account on the workgroup machine and a local admin account on
the domain machine, shouldn't I be able to log in locallally on the domain
machine then administrer the workgroup machine?

An administrator on a remote PC may not be an administrator on the local PC.
The account names, passwords and rights must match between all clients for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Shouldn't there be some way of validating an administrator on the remote
machine locally?

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain. But
still leave the workgroup/user not able to share/use domain resources.

 

[Guest]

I was rereading thread, and noticed that it seems everyone who has replied
thinks I am trying to administer to the domain from a workgroup. It is just
the opposite.

An administrator on a remote PC may not be an administrator on the local PC.
The account names, passwords and rights must match between all clients for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Shouldn't there be some way of validating an administrator on the remote
machine locally?

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain. But
still leave the workgroup/user not able to share/use domain resources.

 

[Richard G. Harper]

It doesn't work that way. You can connect to a workgroup PC with an account
that is an administrator on that computer and get administrator access, but
just because both accounts are administrators in their separate security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

I am not work this work this week so I can't try this. But seeing as I have
an local admin account on the workgroup machine and a local admin account
on
the domain machine, shouldn't I be able to log in locallally on the domain
machine then administrer the workgroup machine?

An administrator on a remote PC may not be an administrator on the local
PC.
The account names, passwords and rights must match between all clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Guest]

Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the workgroup
machine and have local administrative rights on the workgroup machine but not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets. Which
is what I want anyway.

I do not have to change any local security settings to get complete local
access, and the workgroup is still isolated from the domain.
?

It doesn't work that way. You can connect to a workgroup PC with an account
that is an administrator on that computer and get administrator access, but
just because both accounts are administrators in their separate security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

I am not work this work this week so I can't try this. But seeing as I have
an local admin account on the workgroup machine and a local admin account
on
the domain machine, shouldn't I be able to log in locallally on the domain
machine then administrer the workgroup machine?

An administrator on a remote PC may not be an administrator on the local
PC.
The account names, passwords and rights must match between all clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Richard G. Harper]

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user and has
no domain administrator rights. If you go to the Workgroup computer he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator group on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the workgroup
machine and have local administrative rights on the workgroup machine but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets. Which
is what I want anyway.

I do not have to change any local security settings to get complete local
access, and the workgroup is still isolated from the domain.
?

It doesn't work that way. You can connect to a workgroup PC with an
account
that is an administrator on that computer and get administrator access,
but
just because both accounts are administrators in their separate security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

I am not work this work this week so I can't try this. But seeing as I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on the
local
PC.
The account names, passwords and rights must match between all clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Guest]

thanks! I head back in on Tues. will give it a shot after I put out the fires
that have started burning while I was gone. I will let you know how I do.

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user and has
no domain administrator rights. If you go to the Workgroup computer he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator group on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the workgroup
machine and have local administrative rights on the workgroup machine but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets. Which
is what I want anyway.

I do not have to change any local security settings to get complete local
access, and the workgroup is still isolated from the domain.
?

It doesn't work that way. You can connect to a workgroup PC with an
account
that is an administrator on that computer and get administrator access,
but
just because both accounts are administrators in their separate security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I am not work this work this week so I can't try this. But seeing as I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on the
local
PC.
The account names, passwords and rights must match between all clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because the
security
settings are centrally held. On a workgroup each workstation keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Richard G. Harper]

Good 'nuff - we'll be here.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

thanks! I head back in on Tues. will give it a shot after I put out the
fires
that have started burning while I was gone. I will let you know how I do.

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user and
has
no domain administrator rights. If you go to the Workgroup computer he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator group
on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the
workgroup
machine and have local administrative rights on the workgroup machine
but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets.
Which
is what I want anyway.

I do not have to change any local security settings to get complete
local
access, and the workgroup is still isolated from the domain.
?


:

It doesn't work that way. You can connect to a workgroup PC with an
account
that is an administrator on that computer and get administrator
access,
but
just because both accounts are administrators in their separate
security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I am not work this work this week so I can't try this. But seeing as
I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on the
local
PC.
The account names, passwords and rights must match between all
clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because
the
security
settings are centrally held. On a workgroup each workstation
keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied
to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Guest]

Good 'nuff - we'll be here.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

thanks! I head back in on Tues. will give it a shot after I put out the
fires
that have started burning while I was gone. I will let you know how I do.

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user and
has
no domain administrator rights. If you go to the Workgroup computer he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator group
on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the
workgroup
machine and have local administrative rights on the workgroup machine
but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets.
Which
is what I want anyway.

I do not have to change any local security settings to get complete
local
access, and the workgroup is still isolated from the domain.
?


:

It doesn't work that way. You can connect to a workgroup PC with an
account
that is an administrator on that computer and get administrator
access,
but
just because both accounts are administrators in their separate
security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I am not work this work this week so I can't try this. But seeing as
I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on the
local
PC.
The account names, passwords and rights must match between all
clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because
the
security
settings are centrally held. On a workgroup each workstation
keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied
to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Guest]

Sorry it has taken me so long to get back.
It works just as you said. The only thing I had problems with was using
remote control access. I could get in and manage files and registries but
when I tried to to remote control. It would try to force guest on me which
had turned off for security reasons. In order to remote I had to reenable the
guest account. I am not sure I want to to that. Accessing the computers the
other ways will be very helpful too.
thank you VERY much for your input and patience.
MT

Good 'nuff - we'll be here.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

thanks! I head back in on Tues. will give it a shot after I put out the
fires
that have started burning while I was gone. I will let you know how I do.

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user and
has
no domain administrator rights. If you go to the Workgroup computer he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator group
on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no additional
rights buy regular users.

Then create an local account on the workgroup machine with admin rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the
workgroup
machine and have local administrative rights on the workgroup machine
but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets.
Which
is what I want anyway.

I do not have to change any local security settings to get complete
local
access, and the workgroup is still isolated from the domain.
?


:

It doesn't work that way. You can connect to a workgroup PC with an
account
that is an administrator on that computer and get administrator
access,
but
just because both accounts are administrators in their separate
security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I am not work this work this week so I can't try this. But seeing as
I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on the
local
PC.
The account names, passwords and rights must match between all
clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on the
remote
machine locally?

:

You can't. The reason you can administer a domain is because
the
security
settings are centrally held. On a workgroup each workstation
keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied
to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.

 

[Richard G. Harper]

Glad we were able to help you get it all working again.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Sorry it has taken me so long to get back.
It works just as you said. The only thing I had problems with was using
remote control access. I could get in and manage files and registries but
when I tried to to remote control. It would try to force guest on me which
had turned off for security reasons. In order to remote I had to reenable
the
guest account. I am not sure I want to to that. Accessing the computers
the
other ways will be very helpful too.
thank you VERY much for your input and patience.
MT

Good 'nuff - we'll be here.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

thanks! I head back in on Tues. will give it a shot after I put out the
fires
that have started burning while I was gone. I will let you know how I
do.


:

I think you've got it. Let's pick on poor Bob as an example.

You have a domain account named "Bob". Bob is a normal domain user
and
has
no domain administrator rights. If you go to the Workgroup computer
he
wants to connect to over the network and use the Local User Manager
(lusrmgr.msc) to add Bob's name and password to the Administrator
group
on
the local machine, he will be able to connect to it remotely and have
Administrator rights on the Workgroup PC, but still will have no
Domain
rights other than Domain User.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Hmm. I may be dense, if I understand what you are saying.

I could create an local account on my domain machine with no
additional
rights buy regular users.

Then create an local account on the workgroup machine with admin
rights
with
the same local logon name as the domain machine.

I could then log in locally on the domain machine connect to the
workgroup
machine and have local administrative rights on the workgroup
machine
but
not
any domain rights.

Or otherwords the workgroup machine cannot access any domain assets.
Which
is what I want anyway.

I do not have to change any local security settings to get complete
local
access, and the workgroup is still isolated from the domain.
?


:

It doesn't work that way. You can connect to a workgroup PC with
an
account
that is an administrator on that computer and get administrator
access,
but
just because both accounts are administrators in their separate
security
spaces doesn't mean that rights transfer from one to the other.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


I am not work this work this week so I can't try this. But seeing
as
I
have
an local admin account on the workgroup machine and a local admin
account
on
the domain machine, shouldn't I be able to log in locallally on
the
domain
machine then administrer the workgroup machine?

:

An administrator on a remote PC may not be an administrator on
the
local
PC.
The account names, passwords and rights must match between all
clients
for
the same rights to be granted on the client computer.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied
to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


Shouldn't there be some way of validating an administrator on
the
remote
machine locally?

:

You can't. The reason you can administer a domain is because
the
security
settings are centrally held. On a workgroup each workstation
keeps
its
own
security settings.

--
Richard G. Harper [MVP Win9x] (e-mail address removed)
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not
replied
to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm


How can I set up a workgroup on our network that I can
administer(remote)
from my admin domain workstation?

I would like to be able to have admin access as I do in the
domain.
But
still leave the workgroup/user not able to share/use domain
resources.