Weird Issue

[Nicolas Macarez]

Hi !

My issue is rather weird to define.

My config is as follows :

One Dell PowerEdge server with Win2K Server installed as a Domain
Controller, DNS, DHCP server.
A few workstations (Win2K Pro and WinNT 4.0 Workstation) have properly
joined the domain called MYDOMAIN. All the machines are properly patched
(Windows Update).

Everything is fine except one thing.

For some reasons, I want to give the end users all the local administrative
rights on any machine of the network. Usually, I do that by including the
Domain Users group in the local Administrators group of each machine.

This time, I just can't dothat: as soon as I try to browse the users and
groups on the local machine and on the Domain (yes, it asks me my
credentials as a Domain admin and I enter them properly, credentials as a
member of the Domain Admin group), I am denied the access to the drop down
list of the domain users and group ("insufficient privileges").

The funny thing (weird) is that I can see the domain MYDOMAIN in the drop
down list (if I select it, I get a grey part in the window indicating me
that I have't got the sufficient privileges) as well a the name of the local
machine.

For the Win2K Pro clients, the workaround is to include the local
Authenticated Users group in the local Administrators group - and it's OK.
Such a group doesn't exist on Win NT 4.0 Workstations, so I am in a dead
end.


Any idea ?

Help greatly appreciated.

Nicolas

 

[rickiez]

Who are you logged in as when attempting this, Windows SHOULD prompt you
for credentials if you don't have them, but it's worth trying a user
that already has the credentials.

 

[Guest]

Are you logged onto the client with local admin privelages?
Are you able to see any of the domain users?

Try this.
Logon to the client as a local admin.
Add your domain account, if possible admin, to the local admin group.
Log off.
Logon with your domain account you just added locally.

Try adding the groups you want again.
If this does not work please provide any error messages if you receive them

 

[Nicolas Macarez]

Thanks James for your help,

In fact I did find a way to do it.

Instead of logging on as a local Administrator, I logged on the domain as a
Domain Admin and it worked fine. New way to do the things !

Regards,
Nicolas

Are you logged onto the client with local admin privelages?
Are you able to see any of the domain users?

Try this.
Logon to the client as a local admin.
Add your domain account, if possible admin, to the local admin group.
Log off.
Logon with your domain account you just added locally.

Try adding the groups you want again.
If this does not work please provide any error messages if you receive them



--
James Brandt [MSFT]

Hi !

My issue is rather weird to define.

My config is as follows :

One Dell PowerEdge server with Win2K Server installed as a Domain
Controller, DNS, DHCP server.
A few workstations (Win2K Pro and WinNT 4.0 Workstation) have properly
joined the domain called MYDOMAIN. All the machines are properly patched
(Windows Update).

Everything is fine except one thing.

For some reasons, I want to give the end users all the local
administrative
rights on any machine of the network. Usually, I do that by including the
Domain Users group in the local Administrators group of each machine.

This time, I just can't dothat: as soon as I try to browse the users and
groups on the local machine and on the Domain (yes, it asks me my
credentials as a Domain admin and I enter them properly, credentials as a
member of the Domain Admin group), I am denied the access to the drop down
list of the domain users and group ("insufficient privileges").

The funny thing (weird) is that I can see the domain MYDOMAIN in the drop
down list (if I select it, I get a grey part in the window indicating me
that I have't got the sufficient privileges) as well a the name of the
local
machine.

For the Win2K Pro clients, the workaround is to include the local
Authenticated Users group in the local Administrators group - and it's OK.
Such a group doesn't exist on Win NT 4.0 Workstations, so I am in a dead
end.


Any idea ?

Help greatly appreciated.

Nicolas