Full true Administrator Privileges and rights for New User?

I am wondering how to grant full administrator privileges to a newly created user?
Here is the environment:
Windows 2012 Server 64bit
Not part of a domain <WORKGROUP>
Here is the problem:
I created a new user we will call them "SecondaryAdmin", and made them part of "Administrators" group as well as the "Remote Desktop Users" group.
I login through an RDP session as "SecondaryAdmin", I go to a command prompt, and I run IISRESET and it tells me:
"Access denied, you must be an administrator of the remote computer to use this command. Either have your account added to the administrator local group of the remote computer or to the domain administrator global group."
Additionally, I have IE Enhanced Security turned off, but if I open Internet Explorer while logged in as "SecondaryAdmin" it still displays the IE Enhanced Security warnings.
Also, if I try to copy a file to the root "C:\", it gives me "Access denied error" forcing me to continue with elevated administrator privileges.
If I run the command prompt as "administrator" I can do an IISRESET without error.
If I run Internet Explorer as "administrator" I do not get the warnings.
If I run windows explorer as "administrator" I do not get the access denied.
However, I WOULD NOT trust this "SecondaryAdmin" account to install ANYTHING. Even if you ran the install executable as "admin", often times these install files will fire off secondary scripts that wont be fired off as "admin",
which may lead to incomplete or corrupt installs.
This changed from Windows 2008 R2 to Windows 2012.... If I do the same exact thing in Windows 2008, I am able to do all the above things without prompt or error.
So how can I give a new user true, full, elevated, admin privileges without having to run everything as administrator? Some obscure setting in GPO? Some registry setting (already tried LocalAccountTokenFilterPolicy)?
What I have tried:
UAC is OFF
Firewall is OFF
IE Enhanced Security is OFF
Remote Management/Desktop Enabled
User part of Administrators Group and Remote Desktop Group
Used "netplwiz" to verify user is Administrator
Please help!

Hi Chris,
I appreciate your answers, however, this is not what I am looking for.
I want the "SecondaryAdmin" user, who is part of the Local Admininstrator group, to have full Admin access.
I DO NOT want them to have to do anything special, or have any user intervention.
NO yes/no dialog boxes
NO clicking "Run As Admininstrator"
NO changing shortcuts or executable file properties to always "Run as Admin"
I simply want the "SecondaryAdmin" account, which is part of the "Administrators" group, to have the same access and run the same seamless way it did in 2008 R2, with no user intervention required.
This is what I am looking for.
Kind Regards,
James

Similar Messages

  • Safari and Chrome will not display some pages right for new user account

    Not sure this is a Safari issue actually. Behavior is also in Chrome, but not Firefox. If I need to post elsewhere please advise.
    24"imac running 10.5.8. 2gb ram, software update run,
    Setup a new user account. Machine will have 2 users.
    When I login as the new user, in both Safari and Chrome, some pages - google, ebay, amazon, cnn, yahoo, do not display correctly. Mainly empty space, a few graphics all wrong. They do display correctly in Firefox.
    I assumed it was the user. So I added a 3rd user. Same behavior. Tried giving the new user admin rights. Same problem.
    For the admin account, everything's fine on those pages, both in Safari and Chrome.
    It feels like the new user is not getting access to something it needs, but it also feels like more than a font problem. Thanks for any suggestions. Dan

    Thanks for your thoughts. Here's what I've learned. The browsers display correctly for the new user after SafeBoot. I removed all startup items, to no avail. Removed all fonts from the new user account, nothing. Removed all fonts from the admin user's library, nothing. Then I removed all fonts from the HD library, and that fixed it for the new user. Now I just have to figure out which one it was.
    So in summary, a bad font in the HD library was affecting Safari and Chrome (but not Firefox) in new user accounts, but not in the admin user's account. Nice. D

  • About using categories and perspectives for new user

    We are just beginning a conversion and upgrade project to convert our Web site to Oracle Portal. I'm trying to get a good handle on some different things we need to resolve as part of the project. One of the first decisions is using Categories and Perspectives.
    I'd like to ask users about how they have used categories and perspectives and some real-world examples of how these work and improve the site and user experience.
    About us
    We're a big nonprofit river authority and wholesale electric provider in Austin, Texas. Currently, we offer very limited online transaction capabilities. However, we are diverse organization and users come to us looking for every specific information, so these elements may be very helpful. I'm evaluating how we can use these and other elements to make recommendations. Some real-world examples and best practices would help a lot.
    Thank you, Charles Boisseau
    Web editor
    Lower Colorado River Authority
    [email protected]

    Continuing the thread...
    Perspectives and categories may be leveraged in custom search portlets, so that you can enter the content one time, in one place, and have selected content display in multiple places.
    Re: our "news" concept: our central communications group posts news stories tagged with one or more perspectives, such as which school is related to the story. This allows us to keep all of our news stories in one page group, but reuse the content elsewhere. For example, for the School of Nursing intranet, we can use a custom search portlet that automatically displays only that school's stories.
    You'll want to do some up-front planning regarding your classification scheme. One significant limitation of both categories and perspectives is the inability to change the hierarchy. Oracle Portal product team, if you're reading this, this is a serious pain! I might also recommend leaving your classification scheme relatively flat. Tagging content with perspectives becomes more difficult if the content contributor has to visually traverse a deep hierarchy of perspectives.
    Categories work similarly, but we mainly use them to visually sort items on a page using the "Group By" feature of a region.
    Hope this gets some gears turning.
    -John

  • Need somehting to use to poke around on IPAD and suggestions for new user?

    My husband is new to internet and is the proud owner of IPAD2 - but is having trouble getting around with his big fingers, is there something that he could use to poke around with like email?

    Any stylus works. This one sounds good (Amazon)
    http://www.amazon.com/amCase-Ultra-sensitive-Capacitive-Stylus-Kindle/dp/B0059KT EBC/ref=sr_1_1?ie=UTF8&qid=1321149046&sr=8-1
    It has 4.5 stars reviews too. I can't say if it's good or bad, but you may want to check out other options too.
    Almost all styluses (don't know the plural) are below $10. There's not really a "bad stylus" either. Just don't try to make your own, that has a tragic end.

  • Delete iTunes and ReInstall for new user issues.

    Gave husband my old computer when I got a new one. He needs HIS iTunes account installed. I deleted iTunes and anything associated, reinstalled but it still opens with my info. and when he plugs in his new phone - shows my phone info.
    I've deleted, iTunes, QuickTime, associated files, searched and removed all files.
    How do I permanently get rid of me on my old computer so he can start fresh.

    You can reinstall iTunes, however you have to ensure that you drag the 'iTunes Music Library.xml' file back into itunes before you sync your phone. Doing this makes your library appear as it was before so you get back your preferences, playcount, etc.

  • Forgotten administrator name and password for parental controls

    hi. I've forgotten my administrator name and password for parental controls on my childs school macbook air. it has latest update and operating systems.

    You are the administrator, so you should look at the name associated with your /Users/user_name/ folder or Home folder.
    Forgot Your Account Password
    For Lion, Mountain Lion, or Mavericks
        Boot to the Recovery HD:
    Restart the computer and after the chime press and hold down the COMMAND and R keys until the menu screen appears. Alternatively, restart the computer and after the chime press and hold down the OPTION key until the boot manager screen appears. Select the Recovery HD and click on the downward pointing arrow button.
         When the menubar appears select Terminal from the Utilities menu.
         Enter resetpassword at the prompt and press RETURN. Follow
         instructions in the dialog window that will appear.
         Or see:
           Reset a Mac OS X 10.7 Lion Password
           OS X Mountain Lion- Reset a login password,
           OS X Mavericks- Solve password problems,
           OS X Lion- Apple ID can be used to reset your user account password.
    For Snow Leopard and earlier with installer DVD
         Mac OS X 10.6- If you forget your administrator password,
         OS X- Changing or resetting an account password (Snow Leopard and earlier).
    For Snow Leopard and earlier without installer DVD
        How to reset your Mac OS X password without an installer disc | MacYourself
        Reset OS X Password Without an OS X CD — Tech News and Analysis
        How To Create A New Administrator Account - Hack Mac

  • GID and UID for news

    I have built packages for INN, a news server capable of being a private server with only a few groups, to a massive server running thousands fo groups, which seem to have a bit of a problem with what UID and GID the news user and group has.
    The only news server that is an official package is sn which uses a UID of 9 and a GID of 13.
    Is there an official place to lookup sub 500 UID's and GID's, and or register them for news or indeed any other user?

    Hi Mohan,
    On linux systems you cannot bind to ports lower than 1025 unless you are a privileged user (AKA root). On the other hand, you don't want to run a lon-running process like weblogic as a root user.
    So the solution is to start up weblogic as privileged user, bind to low port numbers (usually 80 for HTTP, 161 for SNMP and such) and then weblogic itself changes the user that runs it's process to a low-privilege user such as "nobody" or a dedicated user you create.
    Anywhere in this post "user" can be substituted for "group".
    Hope I explained well,
    Eli

  • How to setup MM costing and drive for new parts before ECM release key is triggered?

    Hi,
        I am on the engineering side of SAP ERP where I create new materials, BOMs, etc.  We do this with a change master without release key today.   We are switching to a more controlled/managed process for engineering changes where we will use change masters with a release key and approval workflows for these tasks (ECM).   The problem we are seeing is that the supply chain side of the business is not able to perform their tasks of costing materials and driving for new parts until the ECM workflows are complete, release key is active, and the changes are valid for production.  There must be a way for supply chain to perform these tasks beforehand, so that when the release key becomes active, material costing is complete, new materials are already on hand (or at least been ordered), so that the process of procurement/production orders are not delayed.  Can you point me to documentation that provides an overview, or summarizes what the best practices are for our supply chain when we start working with ECM release keys?
    Thanks,
    Joseph

    the release key allows you to release the change for specific business functions. Please look at the options available in release key configuration. You will need multiple release keys to bring the changes in a more controlled manner.

  • Can i exchange my appe ipod touch cable and headphone for new one

    can i exchange my appe ipod touch cable and headphone for new one

    Only if they are in warranty and have factory defects.

  • How to Define Workbook / Business Ares Security Correctly for new Users

    Hi All,
    Please could you help me understand the Security Model for Workbooks and business Areas as I believe I am very close to understanding it, but missing something important.
    Background Information:
    We are using the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger) to build our reports on. These are the steps I am taking to try and assign a new user & responsibility access to the existing report.
    1. I create the Report in Discoverer Desktop under the ‘General Ledger Responsibility’ logged in as myself – assume report name = ‘Report_1’.
    2. I create a new Responsibility in Oracle Apps called ‘Discoverer Resource Coordinators’.
    3. I create a new User in Oracle Apps called ‘Joe Bloggs’ and assign the responsibility ‘Discoverer Resource Coordinators’ to the Joe.
    4. Logged in as myself in Discoverer Desktop, Responsibility ‘General Ledger’ I Share the Report (Report_1) to the new Responsibility I just created ‘Discoverer Resource Coordinators’.
    5. In Discoverer Administration, Security, I assign the new Responsibility ‘Discoverer Resource Coordinators’ to the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger).
    6. In Discoverer Administration I set privileges so that the Responsibility ‘Discoverer Resource Coordinators’ can do all tasks, query data, administer. .etc. etc..
    7. I therefore believe everything has been done and attempt to Login and run the report under Joe Bloggs, but am unable to retrieve any data.
    Help… what am I missing!
    Thanks,
    Lance
    Message was edited by:
    Lance

    Dear All,
    This has now been adjusted according to your recommendations but to no avail.
    Myself and Lance have ensured that this new responsibility has unlimited access to all the existing Business areas to eliminate joins within folders not being recognised, we have also ensured that the workbooks that have been created are shared with the correct responsibility.
    I have thoroughly tested this set up by logging in as this new responsibility within Disco. Client to try and retrieve data in a new Workbook, but even for the simplest of queries this fails.
    It seems that there may be a problem with the Responsibility linking to the EUL, could this be due to the new responsibility being created after the Current EUL was set up?
    Does anyone have any information or knowledge where this could happen?
    Regards
    Si

  • How deactivate SAP* after inital logon and creation of new users

    Pl help me to deactivate SAP* after inital logon and creation of new users.
    Regards
    Jyotirmoy

    Hi,
    log on (as sap* to the portal) and navigate to system administration --> system configuration --> user management configuration --> data sources.
    There you should find a dialog for (de-)activating sap*.
    note that the navigation path could be slightly different (my portal ist set to german, so I translated the path on my own).
    Regards,
    Dominik

  • How to retrieve access rights for an user/usergroup ?

    Hello everybody.
    I'm working on BO XI 3.1. And I have to develop with the .NET SDK package an application that retrieves the following data :
    - the access rights to WEBI application and properties for each user/user group.
    - the access rights to each folder and properties for each user/user group.
    etc
    The idea is to retrieve for an user/usergroup the access right on each property of WEBI application and softwares. and same thing for folders....
    I'm looking at the .NET SDK package contents but it takes me a lot of time, even too compared to my deadlines. So I'm looking for help.
    Does anyone have an idea about class of objects, properties and methods to use ?
    Thank you in advance for your help.

    Thanks for these samples.
    The list of user and usergroups is very interesting to audit CMC but my need is different : for example, I'm looking a method to retrieve the level access (full control, no access, ...) of an usergoup on each webi's property. The reason ? To know for example which usergroups have fullcontrol access on the right name "edit SQL" ?
    I think it's hard to retrieve but very interesting to audit CMC...

  • I've already restarted my computer and created a new user, but my IPhone 4 still isn't coming out of the "restore" setting; anybody know how?

    I've recently tried to restore my IPhone4. For some reason, its not working properly (i.e my phone won't come out of restore). I've already restarted my computer, and created a new user account on my computer.The message that keeps popping up says Error 1604 which i know has somethign to do with the USB port but i don't know what specifically. Any Help??

    Error 1604
    This error is often related to USB timing. Try changing USB ports, using a different dock connector to USB cable, and other available USB troubleshooting steps (troubleshooting USB connections. If you are using a dock, bypass it and connect directly to the white Apple USB dock connector cable. If the issue persists on a known-good computer, the device may need service.
    If the issue is not resolved by USB isolation troubleshooting, and another computer is not available, try these steps to resolve the issue:
    Connect the device to iTunes, confirm that the device is in Recovery Mode. If it's not in Recovery Mode, put it into Recovery Mode.
    Restore and wait for the error.
    When prompted, click OK.
    Close and reopen iTunes while the device remains connected.
    The device should now be recognized in Recovery Mode again.
    Try to restore again.
    If the steps above do not resolve the issue, try restoring using a known-good USB cable, computer, and network connection.

  • Since upgrading to 11.1 my Itunes freezes in Windows 7 64 bit what can I do to fix this? I have uninstalled and reinstalled and tried a new user account and tried changing my settings

    Since upgrading to 11.1  ITunes keeps freezing,  I have windows 7 64 bit.  I have tried opening in safe mode and creating a new user, I have also uninstalled and reinstalled.  What can I do to fix this? Its very frustrating.

    Hey pbonnett!
    Here is an article that will help you troubleshoot these issues with iTunes on your Windows computer:
    iTunes for Windows Vista, Windows 7, or Windows 8: Fix unexpected quits or launch issues
    http://support.apple.com/kb/ts1717
    Take care, and thanks for visiting the Apple Support Communities.
    -Braden

  • TS1538 I have just purchased an iPhone5 and created a new user instead of using my previous ID. How can I access my previous data?

    I have just purchased an iPhone5 and created a new user instead of using my iPhone3 ID. How can I access my previous data?

    don't just sign out!
    if you simply sign out, the stuff you recently purchased will be an issue in the future when an update comes out for apps or anything else. restore the device as new from itunes then restore from a back if you have one as stated above...or set up as new and use correct apple id. this will ensure you will be using the apple id that you used originally without issues from the new one.

Maybe you are looking for