Home All Groups Group Topic Archive Search About

Server 2003 R2 - Local Admin Group - AD users

Author
12 Jul 2006 3:55 PM
Curt Winter
I just set-up a Server 2003 R2 AD, I go to a local workstation and login as
the Domain Administrator.  (workstation is Windows XP Pro)

What I want to do is add the user of the workstation to the local
Administrators group.  When I go to local users and groups, it only shows
stuff from the local computer and does not show the domain.

On a windows 2000 AD I would double click the local group and click add and
type in the user name and it would be pointing to the domain by default.

On The Windows 2003 R2 domain when I click add it has the computer name in
"from this location", so I click on the location button and it does not even
show the domain.  I tried typing in DOMAIN\USERNAME in the select objects box
but it would not resolve the user account or allow me to add it.

If I go to my computer I see the mapped domain drives and can access them,
and if I go to my network places I can browse the domain and the server and
connect to resources.  The workstation has a computer account on the domain.

Is there some default policy that I have to change so the workstation will
show the domain under location so I can add users to the local groups?

Any help would be appreciated.

Thank you.

Curt Winter

Author
12 Jul 2006 10:13 PM
sand and sun
This is what Iam guessing, you may need an adminpack.msi to manage the
W2K and W2K3 servers. Also your name/group be in the AD System or Data
Admin group to do related work. Hope this helps.
Hi dont flame me, I am not MCSE.
LOL.

Curt Winter wrote:
Show quoteHide quote
> I just set-up a Server 2003 R2 AD, I go to a local workstation and login as
> the Domain Administrator.  (workstation is Windows XP Pro)
>
> What I want to do is add the user of the workstation to the local
> Administrators group.  When I go to local users and groups, it only shows
> stuff from the local computer and does not show the domain.
>
> On a windows 2000 AD I would double click the local group and click add and
> type in the user name and it would be pointing to the domain by default.
>
> On The Windows 2003 R2 domain when I click add it has the computer name in
> "from this location", so I click on the location button and it does not even
> show the domain.  I tried typing in DOMAIN\USERNAME in the select objects box
> but it would not resolve the user account or allow me to add it.
>
> If I go to my computer I see the mapped domain drives and can access them,
> and if I go to my network places I can browse the domain and the server and
> connect to resources.  The workstation has a computer account on the domain.
>
> Is there some default policy that I have to change so the workstation will
> show the domain under location so I can add users to the local groups?
>
> Any help would be appreciated.
>
> Thank you.
>
> Curt Winter
Are all your drivers up to date? click for free checkup

Author
13 Jul 2006 1:14 PM
Curt Winter
Upon Further research I found I need to set-up DNS on windows 2003 RC2 AD or
it will not work correctly.  I am hoping to get that in place today and I
will post another message as to if that solves the issue.

Curt

Show quoteHide quote
"sand and sun" wrote:

> This is what Iam guessing, you may need an adminpack.msi to manage the
> W2K and W2K3 servers. Also your name/group be in the AD System or Data
> Admin group to do related work. Hope this helps.
> Hi dont flame me, I am not MCSE.
> LOL.
>
> Curt Winter wrote:
> > I just set-up a Server 2003 R2 AD, I go to a local workstation and login as
> > the Domain Administrator.  (workstation is Windows XP Pro)
> >
> > What I want to do is add the user of the workstation to the local
> > Administrators group.  When I go to local users and groups, it only shows
> > stuff from the local computer and does not show the domain.
> >
> > On a windows 2000 AD I would double click the local group and click add and
> > type in the user name and it would be pointing to the domain by default.
> >
> > On The Windows 2003 R2 domain when I click add it has the computer name in
> > "from this location", so I click on the location button and it does not even
> > show the domain.  I tried typing in DOMAIN\USERNAME in the select objects box
> > but it would not resolve the user account or allow me to add it.
> >
> > If I go to my computer I see the mapped domain drives and can access them,
> > and if I go to my network places I can browse the domain and the server and
> > connect to resources.  The workstation has a computer account on the domain.
> >
> > Is there some default policy that I have to change so the workstation will
> > show the domain under location so I can add users to the local groups?
> >
> > Any help would be appreciated.
> >
> > Thank you.
> >
> > Curt Winter
>
>
Author
14 Jul 2006 5:35 PM
Curt Winter
Ok installed DNS on the Windows 2003 R2 AD server.

Pointed the workstations to the server as the primary DNS server.

Went to add the domain user to the local administrators account and still no
Domain showing, tried to manually type it in again, nothing.

I went and looked at the promperties of the computer and it shows joined to
the domain, ipconfig shows the primary DNS pointing to the AD server.

What do I have to do to get a domain user into the local Administrators
account?

PLEASE HELP.

Curt

Show quoteHide quote
"Curt Winter" wrote:

> Upon Further research I found I need to set-up DNS on windows 2003 RC2 AD or
> it will not work correctly.  I am hoping to get that in place today and I
> will post another message as to if that solves the issue.
>
> Curt
>
> "sand and sun" wrote:
>
> > This is what Iam guessing, you may need an adminpack.msi to manage the
> > W2K and W2K3 servers. Also your name/group be in the AD System or Data
> > Admin group to do related work. Hope this helps.
> > Hi dont flame me, I am not MCSE.
> > LOL.
> >
> > Curt Winter wrote:
> > > I just set-up a Server 2003 R2 AD, I go to a local workstation and login as
> > > the Domain Administrator.  (workstation is Windows XP Pro)
> > >
> > > What I want to do is add the user of the workstation to the local
> > > Administrators group.  When I go to local users and groups, it only shows
> > > stuff from the local computer and does not show the domain.
> > >
> > > On a windows 2000 AD I would double click the local group and click add and
> > > type in the user name and it would be pointing to the domain by default.
> > >
> > > On The Windows 2003 R2 domain when I click add it has the computer name in
> > > "from this location", so I click on the location button and it does not even
> > > show the domain.  I tried typing in DOMAIN\USERNAME in the select objects box
> > > but it would not resolve the user account or allow me to add it.
> > >
> > > If I go to my computer I see the mapped domain drives and can access them,
> > > and if I go to my network places I can browse the domain and the server and
> > > connect to resources.  The workstation has a computer account on the domain.
> > >
> > > Is there some default policy that I have to change so the workstation will
> > > show the domain under location so I can add users to the local groups?
> > >
> > > Any help would be appreciated.
> > >
> > > Thank you.
> > >
> > > Curt Winter
> >
> >

Bookmark and Share

Post Thread options