Give a windows domain user local administrative rights?

I'm familiar with managing servers/computers in a windows environment, and I can't seem to find a tool to do something similar in OS X 10.5. I'm getting ready to ship a macbook pro to an employee who will be authenticating against our active directory windows domain for login. The machine is already setup to allow this (and I'm able to log in using my network credentials currently). However, I'd like to also give the user administrative rights so he can install software as he sees fit. In windows, I would just goto the groups section and add the user by typing in his account as : Domain\user and it would add him to that group. I haven't been able to find anything similar with the MacBook so far. Any help would be greatly appreciated.
Message was edited by: vlitsupport
Also.. if this needs to be in another section of the forum, please let me know.
Thanks!
Message was edited by: vlitsupport

found a good tutorial:
http://www.smallbizserver.net/Articles/tabid/266/articleType/ArticleView/Article ID/234/PageID/359/Default.aspx

Similar Messages

  • Find out who has given local administrator rights to standard domain user?

    In my Organization i have faced problems with domain administrator, it seem that all of a sudden a standard domain user is having Local administrator rights. Can anyone please help me how to find out who has given local administrator rights to that standard
    domain user account? 

    Hi,
    Based on your requirement, you need to enable the auditing in your Active Directory to identify the user/ group changes and WHO made the change etc.
    Checkout the below steps to enable auditing for AD User Changes,
    1. Open GPMC console, click Start --> Administrative Tools --> Group Policy Management.
    2. Right click the Default Domain Controllers Policy, and then click Edit.
    3. Navigate to Audit Policy node, “Computer Configuration/ Policies/ Windows Settings/ Security Settings/ Local Policies/ Audit Policy”.
    4. Now enable the Success auditing for - Audit Account Management and Audit Directory Service Access.
    5. Execute the command “GPUPDATE /FORCE” in the Domain Controller to force apply the GPO settings.
    For Windows Server 2008 R2 and later versions, additional configuration is required in  “Advanced Audit Policy Configuration” section in Default Domain Controller Policy.
    1. Go to the node DS Access (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/DS Access.) 
        Enable Success auditing for the following settings
         - Audit Directory Service Changes
    2. Go to the node Account Management (Computer Configuration/Policies/Windows Settings/Security Settings/Advanced Audit Policy Configuration/Audit Policies/Account Management.) 
        Enable Success auditing for the following settings
        - Audit User Account Management
    After completing the audit settings, configure SACL in Active Directory Users and Computers console for enabling the geneartion of AD Change events in the eventlog as shown below,
    Checkout the below KB article on complete list on Event ID and Description for AD Changes,
    http://support.microsoft.com/kb/947226/en-us
    Regards,
    Gopi
    JiJi Technologies

  • Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

    same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
    same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
    How this is technically different?
    If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
    dhomya

    If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing  accounts,
    groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
    I think that is a pretty big difference.
    In fact, it is bad practice to perform you daily server management with an AD privileged account.
    In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
    privileges. Always be carefull when assuming resulting privileges will be the same.
    MCP/MCSA/MCTS/MCITP

  • Query to retrieve windows domain user account

    I am totally new to Oracle. Right now, I have a requirement which needs the windows domain user account and local user accounts to be found and linked to. I ve been searching on google, but no use. Frankly, I have no idea even what I am supposed to do and I am not sure what I wrote here is even framed correct. Please help me out. Thanks a lot.

    Hi,
    I think you've made your first Oracle mistake: think that Oracle is working just the same as MS SQL Server :-)
    First, before trying to do anything, you must read the TFM: Database Concepts(click) in order to begin to understand how Oracle works.
    I'm going to try to explain fast and simple.
    Oracle user accounts are different accounts than OS accounts. That is the first important point to get. A domain user "toto" will not automatically gat an Oracle "toto" account.
    There are 3 types of user authentication:
    . Password: typical authentication, no link between OS account and Oracle account
    . External: User is authentified by the O.S. This means that the DBA has to create a special account that'll be "linked" to the O.S. account (whether it's a local or domain account)
    . Global: The user is authentified by the enterprise directory service.
    You can see these 3 approaches in the SQL Statements: CREATE USER doc(click). So, there is some way to link the Oracle user account to the O.S. user account, but not straight forward!
    I need to verify if my oracle database user account is a windows domain user or not, if he/she is one, then if he/she is a local user account or a global user accountWhen I read this, the closest thing I can think of is the 3 types of authentication. And the info can be found in DBA_USERS (columns USERNAME, EXTERNAL_NAME and PASSWORD - obfuscated of course).
    With these info, maybe can you see why your requirement is a bit strange? Anyway, read the references I linked and come back here with more questions / comments :-)
    HTH,
    Yoann.

  • Want to configure a GPO "Stop (domain) users [having admin rights] from installing software"

    Want to configure a GPO "Stop (domain) users [having admin rights for some particular users]  from installing/uninstalling software"
    Requirements :-
    1. Domain user should not be allowed to install/uninstall any software's. Rest all the actions can be performed by the user like an administrator can do.
    Please suggest if possible then how can I implement the same.

    Hi Amar Chand,
    You can do so by using certain Group Policy settings to control the behavior of the Windows Installer, prevent certain programs from running or restrict via the Registry Editor. The Windows Installer, msiexec.exe, previously known as Microsoft Installer,
    is an engine for the installation, maintenance, and removal of software on modern Microsoft Windows systems.
    You can try the following method to resolve this issue:
    Method 1: Disable or restrict the use of Windows Installer via Group Policy
    Open “GPMC”, create a GPO linked to the correct scope. You can refer to this article
    Create a new Group Policy object.
    Right-click it, click Edit, and then navigate to
    Computer Configuration/Policies/Windows Components/Windows Installer.
    In RHS pane double-click on Disable windows installer.
    Click Enable and configure the option as required. "Always "option indicates that Windows Installer is disabled.
    This setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.
    Click Apply to save this configuration.
    Run gpupdate /force on the clients. 
    For your information, please refer to the following article to get more help:
    Managing options for computers through Group Policy
    http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_wininstall_group_policy_computers.mspx?mfr=true
    Method 2: Restrict Programs from being installed via Registry Editor
    Open Registry Editor and navigate to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\Current Version\Policies\Explorer\DisallowRun
    Create String value with any name, like 1 and set its value to the program’s EXE file.
    e.g., If you want to restrict msiexec, then create a String value
    1 and set its value to msiexec.exe. If you want to restrict more programs, then simply create more String values with names 2, 3 and so on and set their values to the program’s exe.
    Note: You may have to restart your computer.
    In addition, if you choose this method, you could deploy the registry configuration via GPO. Please refer to the following article:
    Configure a Registry Item
    http://technet.microsoft.com/en-us/library/cc753092.aspx
    Regards,
    Lany Zhnag

  • Local Administration rights for Xcelcius and Crystal Reports

    Hello Customercare,
        I am currently compiling a list of software that does and does not require local administrator rights to install and run.  
    I was wondering if you would be able to assist me, we currently use Crystal Reports version 8.5 and Crystal Xcelsius 4.5. I need to find out if these programs require local administrator rights on the computer they are to be used on to a) Install properly and B) run from that computer by a user without local administrative rights for that machine.
    Please let me know or point me in the right direction of a resource who would be able to help me with the above information.
    Many thanks for your time,
    Phil Booth
    GroupM
    Technical Support Engineer

    Hi Joseph,
    Download [Product guide/end userdocument|https://websmp103.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000713358&_SCENARIO=01100035870000000202&] select your product.
    For Business objects Integration kit for SAP click [here|https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/a00ee3b2-5283-2b10-f1bf-8c6413e0898f]
    Regards,
    Shweta

  • Are local Administrator rights required to install or run the following pieces of software

    Hello,
    I was wondering if you would be able to assist me. I am currently cataloging various bits of software in use within our company and need to know if they a) require local administrator rights to install on a computer and b) require local administration rights to run after being installed.
    The pieces of software in question are:
    Blackberry Desktop Manager Version 4.3.0.15
    Blackberry Enterprise Server Version 4.1.3.18
    Any assistance gratefully received, or if you could point me in the direction of who I should be asking that would be great.
    Many Thanks,
    Phil Booth
    Group M
    IT Desktop Support technician.
    Phillip Booth
    GroupM
    Technical Support Engineer
    IT
    [email protected]
    Office: 0207 158 5995
    DID: 5995
    124 Theobald's Road London WC1X 8RX United Kingdom
    www.groupm.com

    Superb detail, thank you.
    (1) Download the Windows Installer CleanUp utility installer file (msicuu2.exe) from the following Major Geeks page (use one of the links under the "DOWNLOAD LOCATIONS" thingy on the Major Geeks page):
    http://majorgeeks.com/download.php?det=4459
    (2) Doubleclick the msicuu2.exe file and follow the prompts to install the Windows Installer CleanUp utility. (If you're on a Windows Vista or Windows 7 system and you get a Code 800A0046 error message when doubleclicking the msicuu2.exe file, try instead right-clicking on the msicuu2.exe file and selecting "Run as administrator".)
    (3) In your Start menu click All Programs and then click Windows Install Clean Up. The Windows Installer CleanUp utility window appears, listing software that is currently installed on your computer.
    (4) In the list of programs that appears in CleanUp, select any iTunes entries and click "Remove", as per the following screenshot:
    (5) Quit out of CleanUp, restart the PC and try another iTunes install. Does it go through properly this time?

  • Finding whether the user has administrative rights

    Is there any way by which we can find whether the user has administrative rights or not using java?

    The very notion of "administrative rights" is
    platform-dependent. It's not standard or well-defined
    what "administrative rights" means across all OSes.
    You'll have to use JNI or Runtime.execI searched net a lot but couldnt find any tutorial or artical regarding how to achieve this in C or C++.
    Any link will be helpful.

  • Administrator in parent domain has no administrator rights when logging into child domain systems.

    We have a simple layout, parent domain in the office is foo.com, I've adding a child domain in the datacenter called prod.foo.com (we have machines with the same names in the office and production, not my doing :p)  Prior to this all of our production
    machines were standalone and various users just had the local administrator account, which has led to some problems. 
    Anyway, on to my issue;
    I have a security group in foo.com called Production Logins that I've added myself to, and on the test windows 2003 server I've allowed FOO\Production Logins the ability to remote desktop, and I'm able to remote into the box web01.prod.foo.com
    just fine, however;   When I log into web01.prod.foo.com under my admin account in the parent domain, I only have basic user rights on that machine, not administrator rights.  Shouldn't administrator rights carry over to the child domain for
    my account?  Is there something specific I need to do to allow that?

    Hi,
    To
    do what
    the friend
    said
    above you need
    to configure
    restricted groups
    GPO
    More
    information:
    http://www.windowsecurity.com/articles/Using-Restricted-Groups.htmlMCP, MCDST e MCSA 2003

  • Users with Administrator rights not being allowed to install programs.

    I have 3 users in my office that are not able to download and install programs due to a security prompt that says that they are unable to install the program due to not having administrator rights. But in the users menu the user accounts are setup with
    full administrator rights. Is this a common problem?

    Hi,
    Are they domain administrator or local administrator? Is there any group policy restriction?
    Please refer to this similar thread:
    http://answers.microsoft.com/en-us/windows/forum/windows_7-desktop/unable-to-install-program-and-getting-error-do-not/cd28bdae-ae0c-4dcc-96cb-00fb2490dd24
    Karen Hu
    TechNet Community Support

  • How to reset windows 2008 R2 Local Administrator password

    Hi Team,
    I have forget windows 2008 R2 local admin password, the server is not in domain , is it any way to reset local administrator password.
    Regards,
    Triyambak
    Regards, Triyambak

    When your Windows Server 2008 R2 computer is still accessible, you can reset or change your administrator password with ease by the following steps.
    Step 1: Log in your Windows Server 2008 R2 computer through the administrator account.
    Step 2: Click on “Start” on the lower left corner of your screen, and hit “Control Panel”, and then doubt-click on "User Account".  
    Step 3: Choose “Make changes to your user account”, and then click on “Change your password”.
    Step 4: Now you will be asked to enter your current password, type in it.
    Step 5: Enter your new password and retype it to confirm your new password. You are optional to type in a word or phrase as the hint of the new password. It is highly recommended. 
    Another tip, Using a password recovery tool to recover WIndows server 2008 administrator password
    This is a universal WIndows password recovery method which can fix any Windows system password issue.
    1. Get Windows Password Rescuer and install it on another computer.
    2. Burn password reset disk into USB or CD/DVD device with Windows password recovery.
    3. Boot Windows server from password reset USB or CD disk
    4. Reset forgotten Windows server 2008 local or domain admin password without data loss.
    Detailed steps: http://www.wimware.com/how-to/reset-windows-server-2008-password.html
    I also have seen a way that users can use a Windows server 2008 install CD to reset the administrator password, you could search and have a try.  

  • The domain users without administrative permission cannot install printers shared on printer server

    Dears
    We have a printer server that OS is Windows server 2003 .And all clinets are installed windows 7.Now,the domain users cannot installed printers shared on the printer server.When i logon the clinent computer with a domain user and access printer server by
    URL \\192.168.37.1 ,i can see all printers shared on the printer server.Then i double click on printer to install it on client computer.It will ask me to input user name and password of local administrator .  
    How to install the printers with domain user directly. Thanks

    refer step #8:
    http://blogs.msdn.com/b/7/archive/2011/07/11/allowing-standard-users-to-install-network-printers-on-windows-7-without-prompting-for-administrative-credentials.aspx
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Exchange Management Console require workstation local administrative rights to run?

    Does launching the Exchange Management Console require local administrative permissions?  
    I understand I need Exchange permissions to perform Exchange tasks, but I am wondering what permissions are required just to run the Management Console?
    Jason Meyer

    Hi,
    If you just want to launch the EMC, you need not require any special permission.
    However, if you want to modify anything, you should assign the corresponding permission to the appropriate user.
    I recommend you refer to the following articles to understand the permission in exchange:
    http://technet.microsoft.com/en-us/library/dd351175(v=exchg.150).aspx
    AD Domain Rights Needed to Manage Microsoft Exchange 2010
    Hope this helps!
    Thanks.
    Niko Cheng
    TechNet Community Support

  • How to give permission to Internal client local admin rights to install applications

    Dear All,
    I want to give internal client rights to install application in his computer. At the same time I don't want him to login to windows server 2008 with admin rights. Could you please let me know how to do that?

    Unfortunately your post is off topic as it's not specific to Microsoft Training and Certification.  
    This is a standard response I’ve written in advance to help the many people who post their question in this forum in error, but please don’t ignore it.  The links I provide below will help you determine the right forum to ask your question
    in.
    For technical issues with Microsoft products that you would run into as an end user, please visit the Microsoft Answers forum ( http://answers.microsoft.com ) which has sections for Windows, Hotmail,
    Office, IE, and other products.
    For Technical issues with Microsoft products that you might have as an IT professional (like technical installation issues, or other IT issues), please head to the TechNet Discussion forums at http://social.technet.microsoft.com/forums/en-us, and
    search for your product name.
    For issues with products you might have as a Developer (like how to talk to APIs, what version of software do what, or other developer issues), please head to the MSDN discussion forums at http://social.msdn.microsoft.com/forums/en-us, and
    search for your product or issue.
    If you’re asking a question particularly about one of the Microsoft Dynamics products, a great place to start is here: http://community.dynamics.com/ 
    If you think your issue is related to Microsoft Training and Certification and I've flagged it as Off-topic, I apologise.  Please repost your question and include as much detail as possible about your problem so that someone can assist you further. 
    If you really have no idea where to post your question please visit the Where is the forum for…? forum http://social.msdn.microsoft.com/forums/en-us/whatforum/ 
    When you see answers and helpful posts, please click Vote As Helpful,
    Propose As Answer, and/or Mark As Answer
    Jeff Wharton
    MSysDev (C.Sturt), MDbDsgnMgt (C.Sturt), MCT, MCSE: Data Platform & Business Intelligence
    Blog: Mr. Wharty's Ramblings
    Twitter: @Mr_Wharty
    MC ID:
    Microsoft Transcript

  • Windows server 2003 local administrator password

    hi,
    I have forgot local administrator password on windows 2003 server. There is no other user to login. Please suggest how to reset password of local administrator. or any other way.
    Thanks in advance.

    You can use the DART tool from the MDOP and use the
    locksmith to reset the password.
    or
    http://home.eunet.no/~pnordahl/ntpasswd/
    http://www.petri.co.il/forgot_administrator_password.htm

Maybe you are looking for