For some reason rights I am assigning to users in active directory are not
being passed. I assigned administrator rights to one user so he could make
some changes to his PC and his level did not change on the local machine.
Same problem with other users, they are only retaining the rights asigned
when the login was created. We are running a single server (2003) with about
10 users on its own isolated domain, I am not an AD expert so any tips or
troubleshooters would be apreciated!

Re: rights not percolating by Meinolf

Meinolf
Wed Jun 18 00:32:29 PDT 2008

Hello duke,

To which group in the domain do you add the users, or how do you make them
admins? Please describe your steps in detail.

If they should only become local workstation admin, use Restricted groups
according to this article:
http://www.frickelsoft.net/blog/?p=13

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> For some reason rights I am assigning to users in active directory are
> not being passed. I assigned administrator rights to one user so he
> could make some changes to his PC and his level did not change on the
> local machine. Same problem with other users, they are only retaining
> the rights asigned when the login was created. We are running a
> single server (2003) with about 10 users on its own isolated domain, I
> am not an AD expert so any tips or troubleshooters would be
> apreciated!
>



Re: rights not percolating by Paul

Paul
Wed Jun 18 06:00:10 PDT 2008

If you made the user a domain admin make sure the domain admin's global
security group is in the local admins security group. Otherwise be real
precise and define every step you took.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"duke" <duke@discussions.microsoft.com> wrote in message
news:971F9D27-5926-4F07-83E9-FD0773874D21@microsoft.com...
> For some reason rights I am assigning to users in active directory are not
> being passed. I assigned administrator rights to one user so he could
> make
> some changes to his PC and his level did not change on the local machine.
> Same problem with other users, they are only retaining the rights asigned
> when the login was created. We are running a single server (2003) with
> about
> 10 users on its own isolated domain, I am not an AD expert so any tips or
> troubleshooters would be apreciated!