Administration Account and Domains

Hello gents,
i'm in a situation where we need to install BPC 7 in a production environment which is not in the same domain where the users are. The servers are in a LAN with its own domain (i.e. DomainProd) and I can ask both domain accounts and, of couse, machine accounts to get access to them. The users are in a separate domain (i.e. domainUsers).
I read somewhere in this forum that it is better that the accounts I need to use during the installation process be domain accounts. I believe that, in a situatione like this one, this doesn't apply. What are the drawbacks of using local machine accounts?
cheers
elio

I agree with both Raman and Sebastien.
If BPC is installed using local account then it will not be able to authenticate to the domains, making it impossible to use domain users. So using domain accounts for the installation is required in this case.
I would add that the BPC sysadmin domain account (used for installation) should be added explicitely to the local administrator group on the web/app server.
That account needs to be able to browse the user domain, which sould have a trust relationship to the server domain.
after that it should just be a matter of defining the proper group in server manager
Bruno

Similar Messages

I deleted my administrator account and cannot make any changes in preferences.

I deleted my administrator account and log my users & groups is locked. I cannot open it, with name and old password. I cannot restore as Lion was downloaded from app store and needs login to re download.
Help

Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ If you’re running OS X 10.7 or later, open LaunchPad. Click Utilities, then Terminal in the page that opens.
Drag or copy — do not type — the following line into the Terminal window, then press return:
dscl . -read /groups/admin GroupMembership
You should get the following output below what you entered:
GroupMembership: root admin1 admin2 ...
where admin1, admin2, ... are the names of the admin users.

I have set up an administrator account and three separate accounts for my kids. I have loaded microsoft office 2011. i can access it from the administrator account but not my kids account. how can I give them access?

I have set up an administrator account and loaded microsoft office mac 2011. i have now added three kids accounts but can't seem to enable them to access the office mac software...... help please.

Where did you install Office?
If you installed it to the Applications folder in the admin account that ie reason why only you can access it.
If you want everyone to be able to access it then you should install it in the Applications folder at root level.
Allan

Administrator account and password problem

I just got a new Macbook for Christmas I have been trying to install LimeWire onto my laptop and every time the Installer asks me to type in my administrator name and password. I've been putting in the username I used to set up my computer but its not working. Since I am the only person using this computer doesn't it make me the administrator? I have already tried putting in the Mac OS X Install disk and reseting the password for my account. I even went to System Preferences--Accounts and changes my password there but nothing has worked. *What am I doing wrong?* Do I need to set myself as an administrator manually? This is so frustrating ><

Welcome to the Apple Discussions!
I've been putting in the username I used to set up my computer but its not working.
If your user is already an Administrator user, the user name should be input into the dialog box by default. You should not need to type your name in. Look inside the Accounts System Preferences. Is your user listed as a "Standard" user? Or an "Admin"? If it's "Standard", then you've encountered on of Mac OS X 10.5's bugs. For some reason, some users don't keep their Administrator status. You can follow the instructions in this article to manually set your status to Administrator:
http://docs.info.apple.com/article.html?artnum=306876
-Doug

Administrator account AND user account neccesary?

I recently read in some posts that you should have an administrator account setup up on your mac but then also have a user account for yourself to use. Can anyone better explain this to me and tell me why I should do this? Right now I am the only one using the computer and there is only one account set up and it is the admin account.
Thanks

Depending on how often you take your pB on the road determines it for me.
Portables are more likely to be stolen than desktops, and if there is sensitive info on it, ssn's for example, I prefer to have that protected or hidden in an upper level account.
That way, if you use a second account for normal, mundane stuff, if it is heisted, the crooks would not have access to top secret stuff.
JMTCW

Administrator Account and Networking

After reading some safety articles, I setup seperate administrator accounts on my PowerBook and Mini. I have an external drive attached to the Mini and since I've setup the admin accounts, I've been unable to connect to the partitions on that drive. They don't show up when I login to the Mini via Network in the finder. I checked permissions and those aren't a problem. Anybody know what to do?
Also, I'm getting frustrated with updating software. How, from my standard account, do I update software that I click through from programs to download? For example, I was alerted to an update from Vienna, clicked, the updated downloaded to my desktop, but I cannot install it from my standard account and it doesn't show up in my admin account.
Is having duel accounts worth these headaches? (I'm beginning to think that a rare virus might be less annoying! )

Separate administrator accounts for your computers tends to be overkill unless you are sharing the computers with others. Mac OS is intended to be run as admin. There seems to be quite a bit of mass hysteria out there, and, as you see, it causes you some inconvenience.
Just use a good password and keep it secret.
Running as admin is nothing like running as "Root".

Pavilion dm4 Asking for an administrator account and its password. What can I do? I

It keeps asking for an administrator account. It needs a password as well! It won't let me go beyond that screen and if I press cancel it will shut the computer. I cannot access my home screen!

Try entering a wrong password- or simply leaving it blank- and tap Enter key. After 3 times it should give you a disabled code. Post the code.
******Clicking the Thumbs-Up button is a way to say -Thanks!.******
**Click Accept as Solution on a Reply that solves your issue to help others**

Difference between ACS Administrator account and ACS user account?

Does an ACS administrator by default have full rights to every device it manages?
I thought ACS administator accounts and user accounts were different.
I have an acs admin account called admin_1. then i created another user account called admin_1 (for switch/router access)
when i set the password for admin_1(user accounts), when i tried to login into the switch it wouldn't take. It would only take the password set for the ACS admin account.
Is this by design?

My understanding was that this is not the case, Ive just tested my installation again to make double sure and the user accounts and the admin accounts are clearly seperated
The RADIUS server does not make use of the Admin user database.

Question about administrator account and access

I am logged on as administrator, but when I try to access certain programs or files I am refused to access as a limited user.
Can anyone help?
Jon

Hi there,
you can access such files or programs by doing a "right-click" on the file/shortcut and "left-click" on "Run as administrator..".
Then the application will be executed wirh maximum rights and full access.
Greets

Administrator Account Disabled after sysprep and capture task sequence in MDT 2010

Hi
We are currently migrating from Windows XP to windows 7. As part of our migration we have 5 base Images (for different areas of the business)
Here is what we are doing:
Create a reference machine with the source files for windows 7 Pro x86
Install applications as part of the Task sequence to build a reference machine.
Make the updates to the machine - required for the build.
Run the Sysprep and capture template to take the capture of the Reference machine.
Import the Capture into the Operating system folder within MDT2010
Create a task sequecne to deploy the image.
Deploy the Image for Testing.
Deploy the image to a machine
Update the machine with the defects
Re Capture the deployed machine and call it ver2.wim
re deploy ver2.wim
Testers test
Defects logged + additional user settings to be captured in the build
Re capture and sysprep runs says the capture has been succesful however after a reboot the administrator account is disabled.
We cant seem to capture anything from here on in. Nothing has been changed in the unattend.
Autologon is set to enable the administrator account and the password is set to blank as this is then handled by policy when the machine is joined to the domain - we have not enabled the unattended join to the domain at this point in time but it will be
for deploying the image.
Have we got our image strategy wrong? does the same rule apply about sysprep running more than 3 times on a single machine if it is captured and redeployed after a sucessfully sysprep to the same hardware or even different hardware.

Hi,
    One of the things Sysprep/WAIK do is disable the adminsitrator account.
    You mentioned that you are setting the autologing to the administrator account and that you are setting it with a blank password, you can add a simple command in to sysprep's xml to reenable the account:
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Order>1</Order>
<Path>net user administrator /active:yes</Path>
</RunSynchronousCommand>
</RunSynchronous>
</component>
   Give it a try and let us know .
Best Regards, Marianok
Saludos, MarianoK
Disclaimer: While I do my best to make sure everything I post is accurate and safe, I’m certainly not perfect so all this information is provided "AS IS" with no warranties or guarantees and confers no rights. Any suggested steps or code provided should be
done under your own risk, I take no responsibilities if your system blows, the universe stops spinning, o nor for any other adverse consequence the information on this code might cause directly or indirectly.
Aclaración: Aunque hago lo posible por verificar que todo lo que posteo es correcto y seguro, Yo ciertamente no soy perfecto y puedo cometer errores, por lo tanto esta informacion es provista "AS IS" / "Como Está" sin garantía alguna y no le confiere ningún
derecho. Cualquier instrucción descripta o código incluido deben ser empleados bajo su propia responsabilidad y bajo su propio riesgo. No me hago responsable si sus datos se dañan, su si
Hi Marianok,
Thanks for your response and taking the time to read the topic we have raised. We believe we already have this step in place but perhaps we have it in the wrong area of the unattend.
Please find below our unattend file for the capture:
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<ImageInstall>
<OSImage>
<WillShowUI>OnError</WillShowUI>
<InstallTo>
<DiskID>0</DiskID>
<PartitionID>1</PartitionID>
</InstallTo>
<InstallFrom>
<Path>.\Operating Systems\Windows 7 Install Media x86\Sources\install.wim</Path>
<MetaData>
<Key>/image/index</Key>
<Value>1</Value>
</MetaData>
</InstallFrom>
</OSImage>
</ImageInstall>
<UpgradeData>
<Upgrade>false</Upgrade>
</UpgradeData>
<Display>
<ColorDepth>16</ColorDepth>
<HorizontalResolution>1024</HorizontalResolution>
<RefreshRate>60</RefreshRate>
<VerticalResolution>768</VerticalResolution>
</Display>
<ComplianceCheck>
<DisplayReport>OnError</DisplayReport>
</ComplianceCheck>
<UserData>
<AcceptEula>true</AcceptEula>
<ProductKey>
<Key></Key>
</ProductKey>
</UserData>
</component>
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SetupUILanguage>
<UILanguage>en-US</UILanguage>
</SetupUILanguage>
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
</settings>
<settings pass="generalize">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DoNotCleanTaskBar>true</DoNotCleanTaskBar>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-UnattendedJoin" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<Identification>
<Credentials>
<Username></Username>
<Domain></Domain>
<Password></Password>
</Credentials>
<JoinDomain></JoinDomain>
<JoinWorkgroup></JoinWorkgroup>
<MachineObjectOU></MachineObjectOU>
</Identification>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<ComputerName></ComputerName>
<ProductKey></ProductKey>
<RegisteredOrganization>OurCompanyNameHere</RegisteredOrganization>
<RegisteredOwner>Windows User</RegisteredOwner>
<TimeZone></TimeZone>
<DoNotCleanTaskBar>true</DoNotCleanTaskBar>
</component>
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Home_Page>about:blank</Home_Page>
<IEWelcomeMsg>false</IEWelcomeMsg>
</component>
<component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<RunSynchronous>
<RunSynchronousCommand wcm:action="add">
<Description>EnableAdmin</Description>
<Order>1</Order>
<Path>cmd /c net user Administrator /active:yes</Path>
</RunSynchronousCommand>
<RunSynchronousCommand wcm:action="add">
<Description>UnfilterAdministratorToken</Description>
<Order>2</Order>
<Path>cmd /c reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v FilterAdministratorToken /t REG_DWORD /d 0 /f</Path>
</RunSynchronousCommand>
</RunSynchronous>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
<component name="Microsoft-Windows-TapiSetup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<TapiConfigured>0</TapiConfigured>
<TapiUnattendLocation>
<AreaCode>""</AreaCode>
<CountryOrRegion>1</CountryOrRegion>
<LongDistanceAccess>9</LongDistanceAccess>
<OutsideAccess>9</OutsideAccess>
<PulseOrToneDialing>1</PulseOrToneDialing>
<DisableCallWaiting>""</DisableCallWaiting>
<InternationalCarrierCode>""</InternationalCarrierCode>
<LongDistanceCarrierCode>""</LongDistanceCarrierCode>
<Name>Default</Name>
</TapiUnattendLocation>
</component>
<component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DisableSR>1</DisableSR>
</component>
</settings>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<UserAccounts>
<AdministratorPassword>
<Value>QQBkAG0AaQBuAGkAcwB0AHIAYQB0AG8AcgBQAGEAcwBzAHcAbwByAGQA</Value>
<PlainText>false</PlainText>
</AdministratorPassword>
<LocalAccounts>
<LocalAccount wcm:action="add">
<Description>Temp account</Description>
<DisplayName>Temp account</DisplayName>
<Group>Users</Group>
<Name>TempAccount</Name>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
<AutoLogon>
<Enabled>true</Enabled>
<Username>Administrator</Username>
<Domain></Domain>
<Password>
<Value>UABhAHMAcwB3AG8AcgBkAA==</Value>
<PlainText>false</PlainText>
</Password>
<LogonCount>999</LogonCount>
</AutoLogon>
<Display>
<ColorDepth>32</ColorDepth>
<HorizontalResolution>1024</HorizontalResolution>
<RefreshRate>60</RefreshRate>
<VerticalResolution>768</VerticalResolution>
</Display>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe C:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>1</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe D:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>2</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe E:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>3</Order>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<CommandLine>cscript.exe F:\MININT\Scripts\LiteTouch.wsf /start</CommandLine>
<Description>Lite Touch new OS</Description>
<Order>4</Order>
</SynchronousCommand>
</FirstLogonCommands>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>1</ProtectYourPC>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<RegisteredOrganization>Ourcomapanynamehere</RegisteredOrganization>
<RegisteredOwner>Windows User</RegisteredOwner>
<TimeZone></TimeZone>
</component>
<component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UserLocale>en-US</UserLocale>
</component>
</settings>
<settings pass="offlineServicing">
<component name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<DriverPaths>
<PathAndCredentials wcm:keyValue="1" wcm:action="add">
<Path>\Drivers</Path>
</PathAndCredentials>
</DriverPaths>
</component>
</settings>
<cpi:offlineImage cpi:source="catalog://pr-dep-03/captureshare$/operating systems/windows 7 install media x86/sources/install_windows 7 professional.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>
Hope this helps!

Administrators group and Administrator account

I'm setting up an Open Directory network and had some questions regarding the Administrator account and the Administrators Group:
1. How do you add members to the Administrators group and how do you see who is a member?
2. Do members of this group have full access to computers that are members of the domain (i.e., computer accounts listed in Server Admin). I've tried logging in as the Administrator on laptops that were joined to the OD domain, but I was not successful. I'm coming from an Active Directory background and the administrator can log into all domain computers. Logging into the OS X server as the administrator works.
Thanks!

Hi z-admin,
Have you ever gotten the answer to this?
My question is similar: if a user in OD is given FULL administration capabilities in OD, is he a "Mac domain administrator"? If not, how can I make my user a "Mac domain administrator", e.g. a person that can log into any Mac connected to my OD and be an administrator on that machine? Otherwise, I need to create a local admin on every Mac and this is a nightmare for any network administrator.
Thanks!

I have a new PC and I am getting the message "The iTunes Library File cannot be saved. You do not have enough access privileges for this operation." I am the only one using this PC and I have Windows 7 Pro and have an administrator account. Help

Can anyone help me with this problem. ITunes message," The iTunes library file cannot be saved. You do not have enough access privileges for this operation." I have administrator account and transferred files from old PC. I downloaded new iTunes program on new PC. I synced my iPhone to new PC, no problem. I deleted old account after indicating shared files to new admin account. Can anyone help?

A belated reply, as the problems itunes has have discouraged me from using it much. If you uncheck the "read only" box, it doesn't stay that way! Next time you use it, the box comes up checked.
I'm still having that problem, even when I open iTunes as administrator.
I've yet to see the answer to this problem. I use itunes mostly to download audiobooks, and I'm ready to download more, and want to save them!

DLU and local "Administrator" account

I have another network admin that has given me some information of the
subject heading that I don't quite understand...
They are using ZEN 3.2 with DLU on a Citrix server. This way, when a
student logs in via Citrix and gets logged in, ZEN policies restrict
them to what they can and cannot do on the local machine. Since they
need elevated rights to the registry (for whatever reason), they use
the "Administrator" account and are members of the "Administrator"
group on the local machine.
I simply don't understand it...When I use DLU (on workstations mind
you), I have the following for the policy...
================================================== =======
Enable DLU
Manage Existing User Account (if any)
Use eDirectory Credentials
Nothing underneath for the username, but they are members of "Users"
================================================== =======
His configuration is as follows...
================================================== =======
Enable DLU
Manage Existing User Account (if any)
Username: Administrator
Member of: Administrators, Users
================================================== =======
He tells me that with this config when a student logs in, they
automatically use the local "administrator" account. That's what I
don't get.
My config makes a new user on the workstation if they haven't logged
into the machine before. I thought at times it would be handy to make
3 accounts locally, such as "Staff" "Student" and "Administrator" for
instance, but didn't realize this config he talks about could make it
happen. Can it? I still don't get it at this point. I'm reading my
manuals and what-not and am not yet convinced.
What I'm hung up on is the password syncing. If I am logging in as
"bbinder" with a password of "hello" (NDS credentials) but the local
"administrator" password is "goodbye", why wouldn't it prompt me for
the administrator password since it's not the same as mine? There
isn't an "existing account" to manage in his config. This (I assume)
means it uses the account specified in the name field you can type in.
In his case, this is "administrator" as typed in above. But since the
passwords aren't the same, how does it use the local "administrator"
account? Does it overwrite the password? Does it create a new
administrator account and call it "administrator.001" ??? Not quite
getting it yet.
Anyone want to try and help me with this? Some people think there
would be some big benefits by having everyone use the local
"administrator" account, for instance because it has full rights to
the registry and file system. Plus, GP's will still be in effect, so
they would be locked out of the parts of the workstation you want to
lock them out of anyway.
Other advantages would include a "pre-made" user profile that has
already been secured and populated with the various things deemed
acceptable by the company's/school's policies.
Also, no delay on login when a new local account has to be created.
Since they are all using the same account being specified in the
policy, it would be nice and fast to login to.
Finally, no more prompting new users to enter in their names and
initials when MS Office apps run for the first time under a user
account. Maybe this could be avoided with a policy, but this would
suffice as well.
Sorry it's so long, but I appreciate any help you guys can offer to
clear this up for me.
Brian

Craig,
I'm sorry - I thought I replied on this post but I didn't.
Just wanted to say thanx for taking the time to explain this to me.
Brian
On Fri, 20 Aug 2004 10:46:44 GMT, Craig Wilson
<[email protected]> wrote:
>DLU simply changes the "Administrator" accounts password in this instance.
>
>How do you know what the current "Administrator's Password"? You don't
>and you just pray DLU or something does not break.
>
>Instead of using the "Administrator's Account", just use any other name of
>an account that does not exist like "SQUAREPANTS".
>
>DLU will create the account and put it in the administrators group.
>All users will share the same profile so you get all the benefeits of the
>other system, without the risk of losing access to the box.
>
>I actually never give user's local admin rights nor do I have user's share
>profiles, but .............

Cannot change anything in user account and family safety, even logging as an administrator account.

My 1st user account was an administrator account, 2nd user account was a standard account. 3rd user account was a guest account of window 8 single language, however i accidentally made a mistake by setting guest account from standard account to become an
administrator account. I also set down the 1st user account from administrator to standard account and after these stupid settings, the guest account becomes administrator account anyone can access in without any password, the 1st and 2nd accounts become standard
accounts! Before this mistake, the 1st user account was the main account of mine, 2nd and 3rd (guest account) were logged in very rarely.
The problem is when i logged in guest account as administrator, i cannot set the 1st or 2nd back to become another administrator account. Something has gone strange, it has been prevented me to set the others to be administrator and the guest back to standard
account. Being as an administrator account, the guest account was totally useless in changing settings. When i logged in with 1st and 2nd account, i also cannot change anything in the user account settings (change type of user account) and family safety, all
attempts to change the user account settings was useless such as i never tried. I also tried "refresh your computer without losing files" but not worked. Please provide me some advices!
I did not find the forum for win 8 single language, so i place my question here.

Thanks for your reply. I tried to go to safe mode of win 8 by holding the shift key while clicking "restart" on the login screen. (My login screen now shows 3 account users). Then i chose troubleshoot -> advanced options -> windows startup
settings-> i went to safe mode. The safe mode only showed a complete black screen with an only window: "Administrator: cmd.exe". I did as you said (typing NETPLWIZ) and the User accounts window appeared. I went to "properties" of each
user account and set 1st and 2nd accounts to Administrator but got the error: "This user cannot be added. Access is denied." and another error window: "Usert accounts: the group membership for ... could not be updated."
Yesterday, i went to elevated command prompt as an administrator and typed "net user administrator /active:yes" with hope that the built-in administrator would be activated and i would use it for full control settings of 3 other user accounts.
But i got the error: "system error 5. Access is denied."
Now, my position is quite bad. Login with guest account which was set as administrator, i still can not have full control of this laptop, so that all attempts of mine to change the user account settings is denied. This guest account also does not have a
password at all so that everyone can open my computer without typing a password. Because access is denied, i cannot set a password for the guest account even now it is the administrator account and i am loging in it.
p/s: I tried to refresh the system but still got the error: "There was a problem refreshing your PC. No changes were made". And i also tried to restore the system, but got the error: "System restore did not complete successfully. Your computer's
system files and settings were not changed. Details: A volume shadow copy service component encountered an unexpected error. Check the Application event log for more information (0x80042302)"
I went in registry editor in safe mode and did as you said but there was no "AutoAdminLogon", "DefaultUserName", "DefaultPassword". I only saw "AutoLogonSID" and other different names...
The problem i got half year ago has still remained and recently i made this mistake. https://social.technet.microsoft.com/Forums/en-US/8ebd868c-bdfd-412e-95a6-9dc0095d431c/cannot-paste-any-online-pictures-from-any-websites-into-wordpowerpointonenote-2013?forum=officeitpro
I am a young woman who always creates mistakes when setting computer because of my carelessness.
Hi,
These phenomenon should be access rights problem, you need to check your current system User Accounts status. In my opinion, your administrator account probably disabled.
Open Run, type LUSRMGR.MSC, press Enter.
Then check your current system account which Group they are belongs to.
If there is any progress, please feel free let me know.
Roger Lu
TechNet Community Support

I have got both a workgroup & domain user accounts and wish to change this to one account (Win XP)

To All,
I know that this sounds a little daft. When I joined my two Win XP clients onto my 2003 Server Domain and since after this I have encountered "multiple" user accounts bearing the same name.
My clients are "REB2 & REB3" and when I logged into both of these as my Domain I have encountered "separate" accounts for the same User Name in mt Active Directory.
I know you can have a single User account bearing the same User Name (As I wish to use both clients as Hotdesks).
I would be grateful for any assistance in regards to this.
Regards,
Bob.
Robert Brindle MCP, MCSA & MCSE.

Hi,
Based on my experience, it is not possible to create two accounts with the same name in a domain.
In addition, workgroup accounts and domain accounts are different and they have no influences to each other generally. In a workgroup, no computer has
control over another computer and all PCs must be on the same local network or subnet. Besides, to log on to any PC in the workgroup, you must have an account on that PC. However, in a domain, it usually has DCs and the domain members can be on different
local networks. If you have a user account in the domain, you can log on to any PC on the domain without needing an account on that PC.
If I misunderstood anything, please feel free to let me know. I would appreciate it if you can describe it more clearly.
Best regards,
Susie

Administration Account and Domains

Similar Messages

Maybe you are looking for