-----Original Message-----
Hi,
We are try to setup a Windows 2000 AD tree for 4 different
location within one single AD doamin.
Issue, the local domain Admin cannot install or remove
program on local Windows 2000 servers. What user right to
do that ?
Please advasie and help !!
Stephen Hau
(e-mail address removed)
.
Stephan,
What exactly do you mean by "local" domain admin?
by "local" WIN2000 Servers?
If you have one AD Domain "broken up" into four physical
locations ( Sites ) then there should be only one Domain
Admins group. We are not talking about four domains (
where there would indeed be four Domain Admins groups ),
right? And all the usual suspects should be a member of
that ( as well as of the built-in Administrators group ).
Also, since I am here - please set up all four Sites in
Active Directory Sites and Services and please make sure
that you create the appropriate Subnets inside ADSS and
associate each Subnet with the appropriate Site.
I might also take this moment to suggest to you that you
install the Support Tools on each and every WIN2000
Server in your environment. The Support Tools are
located in two placed: on the WIN2000 Server CD ( in the
Support \ Tools folder ) and on the WIN2000 Service Pack
CD ( also in the Support \ Tools folder ). I would
suggest that you use the Service Pack CD if possible.
There are a ton of very useful tools ( like NETDOM,
REPLMON, DCDIAG, NETDIAG, NLSTEST, etc. ).
HTH,
Cary
