Local admin versus domain admin on windows 2008

[Guest BrianB]

We have several x32 2008 std servers that we are testing with. They belong

to the domain and the local administrators group contains the domain admins

group. We are moving an app from a 2003 server to a 2008 server. When

trying to install a custom service, we get an access denied error with a

domain admin account. The only account that will create the service is the

local admin.

 

Is there a way to give the domain admins the same privilages as the local

admin account?

 

Thanks,

Brian

[Guest Dusko Savatovic]

Re: Local admin versus domain admin on windows 2008

 

When you join computer to a domain, domain admins global group automaticaly

becomes member of local administrators group, therefore giving local admin

privileges to domain admins. Windows Server 2008 has same security

enhancements as Vista, so you have UAC turned on by default. When you are

logged on as domain admin, you should start privileged operation with "Run

as administrator" option.

 

Dush

 

"BrianB" <BrianB@discussions.microsoft.com> wrote in message

news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com...

> We have several x32 2008 std servers that we are testing with. They

> belong

> to the domain and the local administrators group contains the domain

> admins

> group. We are moving an app from a 2003 server to a 2008 server. When

> trying to install a custom service, we get an access denied error with a

> domain admin account. The only account that will create the service is

> the

> local admin.

>

> Is there a way to give the domain admins the same privilages as the local

> admin account?

>

> Thanks,

> Brian

[Guest Bill Grant]

Re: Local admin versus domain admin on windows 2008

 

As Dusko pointed out, with UAC there is a big difference between a user

with administrator privilege and "the" administrator account.

 

"Dusko Savatovic" <nospam.savatovic@gmail.com> wrote in message

news:#eRA277BJHA.2476@TK2MSFTNGP06.phx.gbl...

> When you join computer to a domain, domain admins global group

> automaticaly becomes member of local administrators group, therefore

> giving local admin privileges to domain admins. Windows Server 2008 has

> same security enhancements as Vista, so you have UAC turned on by default.

> When you are logged on as domain admin, you should start privileged

> operation with "Run as administrator" option.

>

> Dush

>

> "BrianB" <BrianB@discussions.microsoft.com> wrote in message

> news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com...

>> We have several x32 2008 std servers that we are testing with. They

>> belong

>> to the domain and the local administrators group contains the domain

>> admins

>> group. We are moving an app from a 2003 server to a 2008 server. When

>> trying to install a custom service, we get an access denied error with a

>> domain admin account. The only account that will create the service is

>> the

>> local admin.

>>

>> Is there a way to give the domain admins the same privilages as the local

>> admin account?

>>

>> Thanks,

>> Brian

>

[Guest Phillip Windell]

Re: Local admin versus domain admin on windows 2008

 

"Bill Grant" <not.available@online> wrote in message

news:uwkLtf9BJHA.4384@TK2MSFTNGP04.phx.gbl...

> As Dusko pointed out, with UAC there is a big difference between a user

> with administrator privilege and "the" administrator account.

 

Can the UAC be turned off like with Vista,..and then will it behave more

"normal". I totally dispise Vista due to some of that stuff and we still

won't run Vista here because of that. In few months we will probably be

introducing one '08 Server into the LAN as a Member Server.

 

 

--

Phillip Windell

http://www.wandtv.com

 

The views expressed, are my own and not those of my employer, or Microsoft,

or anyone else associated with me, including my cats.

-----------------------------------------------------

[Guest Phillip Windell]

Re: Local admin versus domain admin on windows 2008

 

"Phillip Windell" <philwindell@hotmail.com> wrote in message

news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl...

> Can the UAC be turned off like with Vista,..and then will it behave more

> "normal". I totally dispise Vista due to some of that stuff and we still

> won't run Vista here because of that. In few months we will probably be

> introducing one '08 Server into the LAN as a Member Server.

 

I left out the "?".

It was supposed to be a question :-)

 

 

--

Phillip Windell

http://www.wandtv.com

 

The views expressed, are my own and not those of my employer, or Microsoft,

or anyone else associated with me, including my cats.

-----------------------------------------------------

[Guest Bill Grant]

Re: Local admin versus domain admin on windows 2008

 

 

 

"Phillip Windell" <philwindell@hotmail.com> wrote in message

news:OV4Nz$FCJHA.3496@TK2MSFTNGP03.phx.gbl...

> "Phillip Windell" <philwindell@hotmail.com> wrote in message

> news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl...

>> Can the UAC be turned off like with Vista,..and then will it behave more

>> "normal". I totally dispise Vista due to some of that stuff and we still

>> won't run Vista here because of that. In few months we will probably be

>> introducing one '08 Server into the LAN as a Member Server.

>

> I left out the "?".

> It was supposed to be a question :-)

>

>

> --

> Phillip Windell

> http://www.wandtv.com

>

> The views expressed, are my own and not those of my employer, or

> Microsoft,

> or anyone else associated with me, including my cats.

> -----------------------------------------------------

>

>

I can't think of any reason to do that. It is not as intrusive as UAC in

Vista. It is really just a matter of getting used to running installs etc

using "run as".

[Guest Phillip Windell]

Re: Local admin versus domain admin on windows 2008

 

"Bill Grant" <not.available@online> wrote in message

news:eto4ljNCJHA.2476@TK2MSFTNGP06.phx.gbl...

> I can't think of any reason to do that. It is not as intrusive as UAC

> in Vista. It is really just a matter of getting used to running installs

> etc using "run as".

 

Ok. Well, we will see how it goes when it ends up here :-)

 

--

Phillip Windell

http://www.wandtv.com

 

The views expressed, are my own and not those of my employer, or Microsoft,

or anyone else associated with me, including my cats.

-----------------------------------------------------