Is this supposed to be?

Hi all,

windows 2008 R2
I tried to add domainadmin group to the local administrators group, it
tells me that the group is in the local administratrs group already. But, I
ony can see the local administrator is in the administrators group. How
shoud I add domain admin group to the local administrators group?

thank you.

Howdie!

On 27.05.2010 23:43, ed wrote:
> I tried to add domainadmin group to the local administrators group, it
> tells me that the group is in the local administratrs group already. But, I
> ony can see the local administrator is in the administrators group. How
> shoud I add domain admin group to the local administrators group?

By default, when you join a machine to the domain, the domain admins
group is added to the local "Administrators" group. That is default
behavior - so it's supposed to be there.

Where'd you see that the group's not in the "Administrators" group?

Cheers,
Florian

Thanks for your help.
> Where'd you see that the group's not in the "Administrators" group?

Click -->Server Manager -->Configuration--> local users and groups
-->Groups--> Administrators group...
I ony can see the local administrator is in the administrators group. no
domainAdmin group in the administrators. I tried to add domainadmin group
to the local administrators group, it tells me that the domainAdmin group is
in the local administratrs group already. But, the DomainAdmin is not in the
local administrators group.
How do I know whether the DomainAdmin Group is in the administrators group
since it does not show?





"Florian Frommherz [MVP]" wrote:

> Howdie!
>
> On 27.05.2010 23:43, ed wrote:
> > I tried to add domainadmin group to the local administrators group, it
> > tells me that the group is in the local administratrs group already. But, I
> > ony can see the local administrator is in the administrators group. How
> > shoud I add domain admin group to the local administrators group?
>
> By default, when you join a machine to the domain, the domain admins
> group is added to the local "Administrators" group. That is default
> behavior - so it's supposed to be there.
>
> Where'd you see that the group's not in the "Administrators" group?
>
> Cheers,
> Florian
>
> .
>

Hello ed,

Check your existing Group policies for configured "Restricted groups" or
the Group policy preferences, seems for me that some policy is configured
that have changed the default settings.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Thanks for your help.
>
>> Where'd you see that the group's not in the "Administrators" group?
>>
> Click -->Server Manager -->Configuration--> local users and groups
> -->Groups--> Administrators group...
> I ony can see the local administrator is in the administrators group.
> no
> domainAdmin group in the administrators. I tried to add domainadmin
> group
> to the local administrators group, it tells me that the domainAdmin
> group is in the local administratrs group already. But, the
> DomainAdmin is not in the local administrators group. How do I know
> whether the DomainAdmin Group is in the administrators group since it
> does not show?
>
> "Florian Frommherz [MVP]" wrote:
>
>> Howdie!
>>
>> On 27.05.2010 23:43, ed wrote:
>>
>>> I tried to add domainadmin group to the local administrators group,
>>> it tells me that the group is in the local administratrs group
>>> already. But, I ony can see the local administrator is in the
>>> administrators group. How shoud I add domain admin group to the
>>> local administrators group?
>>>
>> By default, when you join a machine to the domain, the domain admins
>> group is added to the local "Administrators" group. That is default
>> behavior - so it's supposed to be there.
>>
>> Where'd you see that the group's not in the "Administrators" group?
>>
>> Cheers,
>> Florian
>> .
>>

Meinolf,

thanks for your help.

These are the new VMs built with sysprep image and I did not configure any
policy yet.

where should I check it?
Thanks.

"Meinolf Weber [MVP-DS]" wrote:

> Hello ed,
>
> Check your existing Group policies for configured "Restricted groups" or
> the Group policy preferences, seems for me that some policy is configured
> that have changed the default settings.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Thanks for your help.
> >
> >> Where'd you see that the group's not in the "Administrators" group?
> >>
> > Click -->Server Manager -->Configuration--> local users and groups
> > -->Groups--> Administrators group...
> > I ony can see the local administrator is in the administrators group.
> > no
> > domainAdmin group in the administrators. I tried to add domainadmin
> > group
> > to the local administrators group, it tells me that the domainAdmin
> > group is in the local administratrs group already. But, the
> > DomainAdmin is not in the local administrators group. How do I know
> > whether the DomainAdmin Group is in the administrators group since it
> > does not show?
> >
> > "Florian Frommherz [MVP]" wrote:
> >
> >> Howdie!
> >>
> >> On 27.05.2010 23:43, ed wrote:
> >>
> >>> I tried to add domainadmin group to the local administrators group,
> >>> it tells me that the group is in the local administratrs group
> >>> already. But, I ony can see the local administrator is in the
> >>> administrators group. How shoud I add domain admin group to the
> >>> local administrators group?
> >>>
> >> By default, when you join a machine to the domain, the domain admins
> >> group is added to the local "Administrators" group. That is default
> >> behavior - so it's supposed to be there.
> >>
> >> Where'd you see that the group's not in the "Administrators" group?
> >>
> >> Cheers,
> >> Florian
> >> .
> >>
>
>
> .
>

Hello ed,

Just to clarify you talk about the "Domain Admins" builtin into AD and not
a self created group with the name "domainadmin"?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf,
>
> thanks for your help.
>
> These are the new VMs built with sysprep image and I did not configure
> any policy yet.
>
> where should I check it?
> Thanks.
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello ed,
>>
>> Check your existing Group policies for configured "Restricted groups"
>> or the Group policy preferences, seems for me that some policy is
>> configured that have changed the default settings.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Thanks for your help.
>>>
>>>> Where'd you see that the group's not in the "Administrators" group?
>>>>
>>> Click -->Server Manager -->Configuration--> local users and groups
>>> -->Groups--> Administrators group...
>>> I ony can see the local administrator is in the administrators
>>> group.
>>> no
>>> domainAdmin group in the administrators. I tried to add domainadmin
>>> group
>>> to the local administrators group, it tells me that the domainAdmin
>>> group is in the local administratrs group already. But, the
>>> DomainAdmin is not in the local administrators group. How do I know
>>> whether the DomainAdmin Group is in the administrators group since
>>> it
>>> does not show?
>>> "Florian Frommherz [MVP]" wrote:
>>>
>>>> Howdie!
>>>>
>>>> On 27.05.2010 23:43, ed wrote:
>>>>
>>>>> I tried to add domainadmin group to the local administrators
>>>>> group, it tells me that the group is in the local administratrs
>>>>> group already. But, I ony can see the local administrator is in
>>>>> the administrators group. How shoud I add domain admin group to
>>>>> the local administrators group?
>>>>>
>>>> By default, when you join a machine to the domain, the domain
>>>> admins group is added to the local "Administrators" group. That is
>>>> default behavior - so it's supposed to be there.
>>>>
>>>> Where'd you see that the group's not in the "Administrators" group?
>>>>
>>>> Cheers,
>>>> Florian
>>>> .
>> .
>>