Guest BrianB Posted August 26, 2008 Posted August 26, 2008 We have several x32 2008 std servers that we are testing with. They belong to the domain and the local administrators group contains the domain admins group. We are moving an app from a 2003 server to a 2008 server. When trying to install a custom service, we get an access denied error with a domain admin account. The only account that will create the service is the local admin. Is there a way to give the domain admins the same privilages as the local admin account? Thanks, Brian
Guest Dusko Savatovic Posted August 26, 2008 Posted August 26, 2008 Re: Local admin versus domain admin on windows 2008 When you join computer to a domain, domain admins global group automaticaly becomes member of local administrators group, therefore giving local admin privileges to domain admins. Windows Server 2008 has same security enhancements as Vista, so you have UAC turned on by default. When you are logged on as domain admin, you should start privileged operation with "Run as administrator" option. Dush "BrianB" <BrianB@discussions.microsoft.com> wrote in message news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com... > We have several x32 2008 std servers that we are testing with. They > belong > to the domain and the local administrators group contains the domain > admins > group. We are moving an app from a 2003 server to a 2008 server. When > trying to install a custom service, we get an access denied error with a > domain admin account. The only account that will create the service is > the > local admin. > > Is there a way to give the domain admins the same privilages as the local > admin account? > > Thanks, > Brian
Guest Bill Grant Posted August 27, 2008 Posted August 27, 2008 Re: Local admin versus domain admin on windows 2008 As Dusko pointed out, with UAC there is a big difference between a user with administrator privilege and "the" administrator account. "Dusko Savatovic" <nospam.savatovic@gmail.com> wrote in message news:#eRA277BJHA.2476@TK2MSFTNGP06.phx.gbl... > When you join computer to a domain, domain admins global group > automaticaly becomes member of local administrators group, therefore > giving local admin privileges to domain admins. Windows Server 2008 has > same security enhancements as Vista, so you have UAC turned on by default. > When you are logged on as domain admin, you should start privileged > operation with "Run as administrator" option. > > Dush > > "BrianB" <BrianB@discussions.microsoft.com> wrote in message > news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com... >> We have several x32 2008 std servers that we are testing with. They >> belong >> to the domain and the local administrators group contains the domain >> admins >> group. We are moving an app from a 2003 server to a 2008 server. When >> trying to install a custom service, we get an access denied error with a >> domain admin account. The only account that will create the service is >> the >> local admin. >> >> Is there a way to give the domain admins the same privilages as the local >> admin account? >> >> Thanks, >> Brian >
Guest Phillip Windell Posted August 27, 2008 Posted August 27, 2008 Re: Local admin versus domain admin on windows 2008 "Bill Grant" <not.available@online> wrote in message news:uwkLtf9BJHA.4384@TK2MSFTNGP04.phx.gbl... > As Dusko pointed out, with UAC there is a big difference between a user > with administrator privilege and "the" administrator account. Can the UAC be turned off like with Vista,..and then will it behave more "normal". I totally dispise Vista due to some of that stuff and we still won't run Vista here because of that. In few months we will probably be introducing one '08 Server into the LAN as a Member Server. -- Phillip Windell http://www.wandtv.com The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. -----------------------------------------------------
Guest Phillip Windell Posted August 27, 2008 Posted August 27, 2008 Re: Local admin versus domain admin on windows 2008 "Phillip Windell" <philwindell@hotmail.com> wrote in message news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl... > Can the UAC be turned off like with Vista,..and then will it behave more > "normal". I totally dispise Vista due to some of that stuff and we still > won't run Vista here because of that. In few months we will probably be > introducing one '08 Server into the LAN as a Member Server. I left out the "?". It was supposed to be a question :-) -- Phillip Windell http://www.wandtv.com The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. -----------------------------------------------------
Guest Bill Grant Posted August 28, 2008 Posted August 28, 2008 Re: Local admin versus domain admin on windows 2008 "Phillip Windell" <philwindell@hotmail.com> wrote in message news:OV4Nz$FCJHA.3496@TK2MSFTNGP03.phx.gbl... > "Phillip Windell" <philwindell@hotmail.com> wrote in message > news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl... >> Can the UAC be turned off like with Vista,..and then will it behave more >> "normal". I totally dispise Vista due to some of that stuff and we still >> won't run Vista here because of that. In few months we will probably be >> introducing one '08 Server into the LAN as a Member Server. > > I left out the "?". > It was supposed to be a question :-) > > > -- > Phillip Windell > http://www.wandtv.com > > The views expressed, are my own and not those of my employer, or > Microsoft, > or anyone else associated with me, including my cats. > ----------------------------------------------------- > > I can't think of any reason to do that. It is not as intrusive as UAC in Vista. It is really just a matter of getting used to running installs etc using "run as".
Guest Phillip Windell Posted August 28, 2008 Posted August 28, 2008 Re: Local admin versus domain admin on windows 2008 "Bill Grant" <not.available@online> wrote in message news:eto4ljNCJHA.2476@TK2MSFTNGP06.phx.gbl... > I can't think of any reason to do that. It is not as intrusive as UAC > in Vista. It is really just a matter of getting used to running installs > etc using "run as". Ok. Well, we will see how it goes when it ends up here :-) -- Phillip Windell http://www.wandtv.com The views expressed, are my own and not those of my employer, or Microsoft, or anyone else associated with me, including my cats. -----------------------------------------------------
Recommended Posts