Windows Vista Tips

Windows Vista Tips > Newsgroups > Windows Vista Administration > Domain user in local administrators != administrator

Reply
Thread Tools Display Modes

Domain user in local administrators != administrator

 
 
Darin Dugan
Guest
Posts: n/a

 
      09-19-2006
Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
Have added a domain user account to the local administrators group (in
addition to the local administrator). However, this account doesn't seem to
actually get admin rights. Repro steps:

runas /userOMAIN\adminuser cmd
<enter DOMAIN\adminuser passwd>
....in the resulting DOMAIN\adminuser cmd window:
ipconfig /flushdns
The requested operation requires elevation.


In contrast:
runas /user:administrator cmd
<enter administrator passwd>
....in the resulting administrator cmd window:
ipconfig /flushdns

Successfully flushed the DNS Resolver Cache.


This is but one example. Is this a UAC bug?
Cheers.
 
Reply With Quote
 
 
 
 
Darin Dugan
Guest
Posts: n/a

 
      09-19-2006
Ok, so maybe I'm starting to understand the concept here, thanks to Jim's
excellent info at www.jimmah.com. Command line programs don't prompt for
administrative access. So to open an admin-level command prompt properly I
shouldn't use "runas /userOMAIN\user cmd" as I have become accustomed, but
i can have a shortcut to cmd.exe and right-click, choose run as
administrator, then enter DOMAIN\user and the associated password. Better
yet, go to the advanced properties of the shortcut and tell it to always run
as administrator.

Now, is there any way to always run as a specific administrator? I'm quite
accustomed to double-clicking on a shortcut and then typing my DOMAIN\user
password. With this new method I need to double-click then select the
appropriate admin account or choose other user and enter the username and
password both. Wow don't I sound petty.

Cheers.

"Darin Dugan" wrote:

> Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
> Have added a domain user account to the local administrators group (in
> addition to the local administrator). However, this account doesn't seem to
> actually get admin rights. Repro steps:
>
> runas /userOMAIN\adminuser cmd
> <enter DOMAIN\adminuser passwd>
> ...in the resulting DOMAIN\adminuser cmd window:
> ipconfig /flushdns
> The requested operation requires elevation.
>
>
> In contrast:
> runas /user:administrator cmd
> <enter administrator passwd>
> ...in the resulting administrator cmd window:
> ipconfig /flushdns
>
> Successfully flushed the DNS Resolver Cache.
>
>
> This is but one example. Is this a UAC bug?
> Cheers.

 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Local Vista User Account using Domain Security Pol? Noob Windows Vista Security 4 04-01-2008 01:35 PM
Add NT 4 Domain User to Local Adminstrators Group Alson Windows Vista Administration 3 01-30-2008 11:54 AM
Failed to logon with domain user to Vista after copy local profile Sabawee Windows Vista Administration 0 11-29-2007 12:13 PM
domain user can't be local administrator? flyzone@technologist.com Windows Vista General Discussion 2 03-02-2007 01:17 PM
User Profiles Local vs Domain Jeffrey Bard Windows Vista General Discussion 6 02-15-2007 01:27 PM



1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59