Domain Admin vs Local Admin

[Chad M]

I have been installing software on devices in the domain but I have run into
trouble with some PC's. I run the install for the program while I am logged
on as a domain admin but it gives me an error saying " You must have
administrator rights in order to run....". I check the local Administrators
group and the Domain Admin group is in the Local Administrators group, but I
still cannot install. I log on as the local Administrator and I am able to
install the software. What's going on?

 

[Meinolf Weber]

Hello Chad,

Do you use images for installing the clients? Are they sysprepped?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Chad M]

No they are not imaged.

Hello Chad,

Do you use images for installing the clients? Are they sysprepped?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Meinolf Weber]

Hello Chad,

The machines are configured to use only internal domain DNS servers? No external
from your ISP?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Jorge de Almeida Pinto [MVP - DS]]

It may be the app that is being installed is checking if your user account
is a direct member of the local administrators group

although the domain admin account is a member of the local admin group on
the client through the domain admins group, put the domain admin account
directly in the local admins group and try again.

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx

 

[Chad M]

Yes the machines only use internal DNS.

Hello Chad,

The machines are configured to use only internal domain DNS servers? No external
from your ISP?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[Chad M]

I just tried this it was unsuccessful. The app I am having trouble with is
Partition Magic. I also install IBM Client Access and upon restart it has
some files to update but it says that it can't complete the setup due to
administative privileges.

 

[Anteaus]

I just tried this it was unsuccessful. The app I am having trouble with is
Partition Magic.

You would be as well running the DOS version from a boot CD. There is no
reason I know of to run this under Windows.

From a security point of view, it's in any case preferable to use a local
administrator account for workstation maintenance. Domain admin grants the
user (and any malware running under that account) unrestricted access to the
whole network, including the fileserver's system-volume and registry. This
fact is often not realised.