Not able to add local admin user to domain computer after windows 2003 AD upgrade.

Discussion in 'Windows Networking' started by El CiD, Oct 28, 2007.

  1. El CiD

    El CiD Guest


    back in the 2000 AD era, I was ablet to manually add a domain user to
    the Local admin group in certain domain pc. This was sort of a
    requirement for certain users eg, laptop users that needs to have more
    than average user control of their pc. However, after I upgraded my
    domain controller to AD 2003, I am not able to do so. I can add the
    user but then it gets overwritten by the default domain policy?.

    I have gone though each policy and cannot find an entry where it tells
    the domain to over write any exisiting local administrator account.

    Has anyone encountered this issue before? Any help / input in this
    matter is hughly appreciated.
    El CiD, Oct 28, 2007
    1. Advertisements

  2. Meinolf Weber, Oct 28, 2007
    1. Advertisements

  3. El CiD

    El CiD Guest

    thank you very much for the info.. This is the same solution I have in
    place right now.. But I am curious, why this was never the case in
    windos 2000 AD? I did not have to do anything in active directory nor
    used restricted groups in order to keep a user in the local admin

    El CiD, Oct 28, 2007
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.