Cant add Windows accounts to staff or admin group

cant add Windows accounts to staff or admin group
I have one Mac pro workstation on a all windows network, its added to the domain. i can give network users administrative permissions on the pc by selecting allow user to administer this computer in the accounts in system preferences but they dont have file permissions unless i add them explicitly on the file or folder. i'm new with macs and not sure on what to do.

> local users (Not domain Users) to this Group and then nest this Group
> into the Local Admin Group Built-in into Windows 8
You cannot nest local groups.
Greetings/Grüße,
Martin
Mal ein
gutes Buch über GPOs lesen?
Good or bad GPOs? - my blog…
And if IT bothers me -
coke bottle design refreshment (-:

Similar Messages

  • Add Local Users to the Local Admin Group

    I am looking either via GPO or Third Party Tool.  I would like to add 6 Users to the Local Admin Groups on all the computers running Windows 7/8.  I want to Create a Group called "OUR Local Admins" and add these 6 local users (Not domain
    Users) to this Group and then nest this Group into the Local Admin Group Built-in into Windows 8
    Thank u

    > local users (Not domain Users) to this Group and then nest this Group
    > into the Local Admin Group Built-in into Windows 8
    You cannot nest local groups.
    Greetings/Grüße,
    Martin
    Mal ein
    gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me -
    coke bottle design refreshment (-:

  • Cant add hotmail account to Mail on Iphone 4S

    I have recently reset an old iPhone 4s 32gb for work purposes, and am trying to set up my email account.
    Ive tried using the 'exchange' account however shows up saying  "Outlook Account" Unable to verify account information.
    So ive tried using other in the hopes of adding it, and its coming up saying - A WINDOWS LIVE HOTMAIL PLUS SUBSCRIPTION IS REQUIRED TO USE HOTMAIL ACCOUNTS WITH MAIL. VISIT
    GET.LIVE.COM/MAILPLUS/FEATURES FOR DETAILS. YOU CAN ALSO ACCESS YOUR HOTMAIL ACCOUNT ON THE WEB AT MAIL.LIVE.COM
    Ive tried visiting the above website and I get nothing, saying its offline or something.
    I select Next, and it goes through the stage saying 'verifying' and it comes up with another pop up saying" The POP server "pop3.live.com" is not responding. Check your network connection and that you entered the correct information in the "Incoming Mail Server" field. I select OK. I try and Re-Save the info, which goes through "verifying" again, and it comes up with;
    Cannot connect using SSL. Do you want to try setting up the account without SSL?
    Yes or No?
    My passwork is correct? I have no idea why this is becoming an issue, when before the reset everything was working perfectly.

    Short answer: when you are in settings, add email account, scroll down to outlook.com and use this to enter your hotmail account. Hope it works for you.

  • Is it recommended practice to add SCCM service accounts to the Domain Admins group?

    I am working with an external consultant that is recommending that all of the SCCM service accounts be added to the Domain Admins group.  I am not the SCCM engineer, I am the AD guy, this is the reason I am questioning this methodology.  I have
    read several articles that seem to provide the appropriate configuration options for all of the SCCM accounts so I see no need to allow these accounts to have Domain Admin level access to the environment.  I don't see a reason for ANY of the service accounts
    to have Domain Admin, let alone all of them.  I have referenced several TechNet articles but there does not seem to be definitive guidance around this.  Could anyone assist with settling this?  Thanks in advance.

    No, there's absolutely no reason for the service accounts to be domain admins.
    All of the required service accounts used in a SCCM environment can be given the proper permissions given their purpose.
    Example: Join Domain Account can be given the permissions to join computer objects in the very specific OU in AD, and nothing else.
    Network Access Account only need read access to your distribution points.
    Client Push Account needs local administrative permissions on your clients.
    What i'm trying to say is. None of any of the service accounts needs to be domain admin. Hope that helps.
    Martin Bengtsson | www.imab.dk

  • Cant add email accounts

    ok just bought a macbook pro retina. im trying to add email accounts to it. i have yahoo msn gmail and hotmail accounts i need to add. every time i fill in the add accounts it will not accept any passwords nor will it save any under preferences.im not stuck,any help? my ipad accepts them as does my galaxy note phone,but this will not no matter what i do?

    May I suggest you delete all your e mail settings
    then
    see
    http://support.apple.com/kb/index?page=search&src=support_site.home.search&local e=en_GB&q=email

  • Service accounts adding to Local admin group

    Hello Everyone,
    What are the risks with adding SharePoint service application service accounts to local admin group.
    I see in many Microsoft blogs not to use farm account to create service application and better to use dedicated service account but i didn't see any articles why we shouldn't add dedicated service accounts to local admin group
    I am facing some GPO issue and one my friend suggested to add service accounts to add local administrator group to fix this issue but i am not sure what the risks behind it. 
    Please let me know if you aware of risks.
    Thanks S

    The basic is that it increases your attack surface. If the service (and this goes for any application regardless of vendor or platform) has elevated access to the underlying system (e.g. Local Administrator, SYSTEM, root, and so forth) and that service is
    compromised, there is the possibility that the entire server would be compromised.
    Clearly, this is not a good situation.
    Having said that, there are two scenarios where a service account in SharePoint must be a Local Administrator:
    If you're running the Claims to Windows Token Service (C2WTS) as a Domain User. This account requires Local Admin.
    If you're provisioning the User Profile Sync Service, the Farm Administrator account must be a Local Administrator during the provisioning process (reason being is that it makes calls to the SAM).
    Trevor Seward
    Follow or contact me at...
    &nbsp&nbsp
    This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

  • Mixed Mac & PC PCs no longer showing up in "shared"cant add windows printer

    Hi all,
    I have noticed that none of the PCs on my network at work are showing up in finder under the 'shared' section, hasnt really been a big deal, i have shortcuts to all the network folders/printers i need to access (main printer is shared from a XP machine)
    but with the recent installation of an SSD drive i thought rather then clone old stuff id start fresh
    installed 10.6.5 on my late 2009 Macbook, no worries
    have done all the updates.
    went to print, oh thats right i need to set it up.
    it is not showing the printer in the 'windows' section of add printer.. Hmm i thought, thats odd, I booted off my old drive, yep, could still print but there is nothing listed if i try to add a new printer.
    jump onto a windows 7 machine, yep, there is all the PC's and macs on the network.
    jump onto the iMac based 10.6 server, Hmm IT cant see any PC's or shared printers either.
    now if i goto the addresses manually they mount and i can access them, but unlike windows, i can only mount volumes, i cannot mount the networked system and then select 'add this printer'
    I have looked around, from editing DNS settings, changing my samba.conf file etc, nothing works.
    the odd thing is that when im at home, my laptop can see the NAS, networked PC's ect no problem, so its somthing here, not this mac, but on the network.
    I run an IPcop based firewall for the sole purpose of cacheing microsoft and Apple updates (I run a computer repair shop , these updates are a killer on the 'ol download allowance)
    i have restarted the modem, firewall, network hubs etc, still no joy.
    it was probably just over a month ago i remember adding the front counter printer to this mac on its old HDD without issue, so something in the last month has gone kaplewie.
    Any suggestions are welcome but unfortunatley the network structure is a bit too involved to disconnect all systems and plug into a basic hub :/ - this setup has been working for 3 years with very little issue
    what gets me, while my MAcbook is fully up to date and may be the target of blame (failed update or somthing) the iMac server has not been updated for 9 months since we put 10.6 server on it, so it wasnt not an update that caused this.
    is there some odd chance that a new PC on the network maybe causing some issue?
    wow, long post.. sorry..
    any help greatly appreciated!
    Richard

    Download CS5 products
    The rest is beside the point. Serial numbers always have been platform specific and swaps limited to current versions.
    Mylenium

  • The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete - Cant add Outlook accounts

    Hi have recently started getting the following error message when setting up new accounts with Outlook 2007:
    The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete this action.
    Outlook then prompts me to enter the username and password, i do so and get message again. This happens on Windows XP Professional and Vista, i cannot setup any accounts for new machines.
    Points to note are that OWA works fine, and previous users who are already setup work fine also. It seems to be limited to setting up new Outlook 2007 accounts.
    It can find the username fine. It comes up with green ticks underr the Online Search for your server settings:
    Establish Network connection
    Search for [email protected] server settings
    Long on to server ---------- then it fails with a big red cross at this point
    Recently i did add a second mail server to the network but it was not configured to talk to the other main mail server which was handling all the functions of mail box, CAS, hub transport. I had installed all the same roles on the second server with a view to move it across and retire the old server, the second machine is a different machine name from the main mail server. In summay my servers are:
    svr001              Server 2003 R2 Enterprise x64 domain controller
    mail                 Server 2003 R2 Enterprise x64 non-domain controller with exchange 2007 SP1
    mail001            Windows 2008 Enterprise x64 non-domain controller with exchange 2007 SP1
    The main box "mail" has been fine until i recently introduced this new server "mail001" into the network.
    I am really stuck now and would really appreciate any pointers or steps to debug the above.
    Many thanks,
    Chris

    The FIX IT here
    http://support.microsoft.com/?kbid=319206 works, but only for a user who's already logged in (if you just run the fix it program and do nothing else). To make it work for all users you'll need to manually edit the registry as it says in the article.
    To force Outlook to use a pre-defined global catalog server, use the following steps to set the following special registry parameter to point to the Fully Qualified Domain Name (FQDN). Doing this over-rides any setting in the MAPI profile.
    Click Start, and then click Run.
    In the Open box, type regedit.exe, and then click
    OK.
    Locate and then click the following key in the registry:
    HKEY_CURRENT_USER\Software\Microsoft\Exchange\Exchange Provider
    Note You may have to create the registry path.
    On the Edit menu, click Add Value, and then add the following registry value:
    Value name: DS Server
    Data type: REG_SZ (string)
    Value data: FQDN of the global catalog server
    This allowed me to roll out a bunch of laptops and not have to worry about running the Fix It for each user.
     update: Sysprep seemed to remove fix. Each time a new user logged into a newly imaged laptop (on domain) same error about Outlook 2007 cannot connect to Exchange. Have tried just about everything, but all I seem to be able to do is run this stupid
    Fix it each time. Luckily I don't have 1000 machines to setup because then I'd be screwed.

  • Cant add hotmail account on iPad

    I can access my hotmail account on my pc but I cannot add a hotmail account on my iPad, its says that my account information is incorrect.

    Try the Windows Live App.

  • Cant add jabber account to messages app

    Hi,
    When I try to add a new account to Messages the only option for an account is yahoo.  My other machines allow jabber, aim etc but the only option i get on this machine is yahoo.
    Perhaps the preferences have gone awal I have tried deleting them in the library to no avail.
    Any help is greatly appreciated.
    CC

    First, make sure that Parental Controls are not enabled for the account. If not, continue.
    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, or by a peripheral device. 
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to boot and run than normal, and some things won’t work at all, including Wi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
    The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Test while in safe mode. Same problem? After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem.  Post the results of the test.

  • HT4528 i cant add email account

    i wanna add another email account and i can't get it to verify    

    Enter the correct credentials... it will work every time.

  • N8 cant add Hotmail account?

    When my Anna-N8 sudenly stopped syncing Hotmail, I deleted the account to add it again (as recomended by Nokia in this forum). But now I just get a notification saying "Service unavailable at the moment. Please try again later" (my translation from Swedish) when I try to set up the Hotmail-account.
    Any ideas?

    This has happened to me too. It's so frustrating. Everything was working fine until 23/09, then nothing. It wouldn't sync so I deleted the account from my phone and tried to reinstall but it won't connect to the servers and it tells me to set up some 'mail for exchange' thing.

  • Cant add new account

    the + button don't open a window for adding new account
    I tried to delete all account and disabled sharing and deleted all .plist for ichat from libraries but problem is still there
    please help,)

    ok
    I reinstall adium with pacifist.
    I already had to do this second time...it's really shame that this app is not able to work always fine in my case,(

  • Cant add Live account to email.

    Wiped Playbook OS 2 and everything worked fine with the exception of a Live account for email.  After putting username and password and hitting save it gives me this error message.  Account Live- ********* failed testing with current settings. I have wiped again, restarted but no matter it always ends with this error message..   Any ideas...

    http://supportforums.blackberry.com/t5/BlackBerry-PlayBook/Email-Problems/td-p/1770169

  • Have set IMap to 993 & SMTP to 465, still cant add Rogers account

    Rogers.com is not recognized by Thunderbird and entering the approved POP, IMAP and SMTP values is not sufficient to get the account registered. Others have this problem; is there no solution?

    Well Thunderbird could not communicate with Rogers in the wizard, what would change now. Of course it will not work.
    You have not identified or corrected the original issue, which in all probability is your anti virus. Nortons in particular, but almost all anti virus programs these days come with a firewall that blocks the communication process between Thunderbird and the server. So check your firewall component and make sure Thunderbird has full access to all ports on the internet.
    Then disable mail scanning in your anti virus program. Reboot and then see if it works.

Maybe you are looking for

  • HP photosmart D110 Mac OSX 10.8.5

    I have had to reload my printers into my Macbook pro.  I have loaded the HP photosmart D110 in the print/scan utility and can see the printer.  I also can print a test page.  When I go to print a document, I get the following message "printing-printe

  • Vertical stripes after latest Security Update 2008-004 for OS X Tiger

    Hi there, I'm experiencing vertical stripes and color issues on my PB G4 17 inch screen after the security update 2008-004. Funny thing is, a screenshot looks fine. I already resetted PRAM and NVRAM. Didn't help. Does anyone know a solution? Thanks,

  • How to implement "press any key to continue",please help

    my problem is when the "press any key to close the dos" has displayed in the dos , how can realize to close the dos when i press any button. i have try to use system.in.read();but this method doesn't end until i press the "enter"button.

  • Broken UI in Smart playlists

    I have found that when you want to add "Playlist is" statements in a smart playlist (which I use A LOT for merging my favourites), the UI is basically broken. It is impossible to tell a "Folder" in the iTunes hierarchy from a Playlist.... In fact, yo

  • Re: How to do the validation of option buttons

    If you name your buttons ie. your search withnin results button will have attribute name="searchinresult" then your code can look like: if (request.getParameter("searchinresult")!=null) { // make the serach in result code } else { // make new search