Local Admin Privs

[The Limey]

Is there anyway that directory administrators can inherit admin privileges on machines that use the server for authentication without creating local accounts?

[Ross]

If you check them as “administer this directory domain”, they should have local admin access rights.

[The Limey]

Thanks for the info, but I’m not sure if I understand totally. What are the details of the local admin group? And does this mean it has to be done individually on each computer?

[Lindsay Robertso]

I’m also having problems with this, and cant find information about it…

i’ve tried a few things, but my problem may be related to “Supercard” version 4.1.2 not being happy being used by a network user.

But i need to be sure that i’m doing the right thing to allocate rights.
anyone know of a good guide on this?

buy the way Joel, i wanted those boots you had in Sydney…

[fatman]

[QUOTE BY= macshome] Yeah, you just need to add the network users you wish to give local admin rights into the local admin group on the workstation.[/QUOTE]

I know this will come across as a stupid question, but I’ve never had to do this before…. What is the process to add network admins to a local machine? MacTroll talked about dragging the network admin group into the local admin group but I don’t understand how to do this. Is there anyway you could post a screenshot or two?

[OD Master]

It’s just a simple as a few clicks of the mouse:

– Log in under the Network Account on your client(s)
– Open System Preferences > Accounts
– Open the lock using the (generic) local Administrator account
– Click the check box “Allow user to administer this computer”

From now on the network user has full admin rights on this specific client.
It can’t get any simpler than that…

Norbert

[fatman]

You’re right, OD Master, it can’t be much easier than that! Thanks for the heads up.

[The Limey]

[QUOTE BY= OD Master] It’s just a simple as a few clicks of the mouse:

– Log in under the Network Account on your client(s)
– Open System Preferences > Accounts
– Open the lock using the (generic) local Administrator account
– Click the check box “Allow user to administer this computer”

From now on the network user has full admin rights on this specific client.
It can’t get any simpler than that…

Norbert
[/QUOTE]

What about for accounts that are not mobile- i.e. network only accounts?

[AaronAdams]

[QUOTE BY= fatman]I know this will come across as a stupid question, but I’ve never had to do this before…. What is the process to add network admins to a local machine? MacTroll talked about dragging the network admin group into the local admin group but I don’t understand how to do this. Is there anyway you could post a screenshot or two?[/QUOTE]
Couldn’t he use Workgroup Manager to connect to the target machine(s) and add domain groups to local groups that way?

[The Limey]

The best thing to do is to use the procedures outlined in this article.

[OD Master]

[QUOTE BY= The Limey]What about for accounts that are not mobile- i.e. network only accounts?[/QUOTE]

Well, my description was exactly for Network Accounts… 😎

Norbert

[The Limey]

[QUOTE BY= OD Master] [QUOTE BY= The Limey]What about for accounts that are not mobile- i.e. network only accounts?[/QUOTE]

Well, my description was exactly for Network Accounts… 😎

Norbert[/QUOTE]

I hadn’t realised that that would work… I’m going to have to remember that one. Thanks.

[Author]

Posts