Local admin versus domain admin on windows 2008

Discussion in 'Windows Server' started by BrianB, Aug 26, 2008.

  1. BrianB

    BrianB Guest

    We have several x32 2008 std servers that we are testing with. They belong
    to the domain and the local administrators group contains the domain admins
    group. We are moving an app from a 2003 server to a 2008 server. When
    trying to install a custom service, we get an access denied error with a
    domain admin account. The only account that will create the service is the
    local admin.

    Is there a way to give the domain admins the same privilages as the local
    admin account?

    Thanks,
    Brian
     
    BrianB, Aug 26, 2008
    #1
    1. Advertisements

  2. When you join computer to a domain, domain admins global group automaticaly
    becomes member of local administrators group, therefore giving local admin
    privileges to domain admins. Windows Server 2008 has same security
    enhancements as Vista, so you have UAC turned on by default. When you are
    logged on as domain admin, you should start privileged operation with "Run
    as administrator" option.

    Dush
     
    Dusko Savatovic, Aug 26, 2008
    #2
    1. Advertisements

  3. BrianB

    Bill Grant Guest

    As Dusko pointed out, with UAC there is a big difference between a user
    with administrator privilege and "the" administrator account.
     
    Bill Grant, Aug 27, 2008
    #3
  4. Can the UAC be turned off like with Vista,..and then will it behave more
    "normal". I totally dispise Vista due to some of that stuff and we still
    won't run Vista here because of that. In few months we will probably be
    introducing one '08 Server into the LAN as a Member Server.


    --
    Phillip Windell
    www.wandtv.com

    The views expressed, are my own and not those of my employer, or Microsoft,
    or anyone else associated with me, including my cats.
    -----------------------------------------------------
     
    Phillip Windell, Aug 27, 2008
    #4
  5. I left out the "?".
    It was supposed to be a question :)


    --
    Phillip Windell
    www.wandtv.com

    The views expressed, are my own and not those of my employer, or Microsoft,
    or anyone else associated with me, including my cats.
    -----------------------------------------------------
     
    Phillip Windell, Aug 27, 2008
    #5
  6. BrianB

    Bill Grant Guest

    I can't think of any reason to do that. It is not as intrusive as UAC in
    Vista. It is really just a matter of getting used to running installs etc
    using "run as".
     
    Bill Grant, Aug 28, 2008
    #6
  7. Ok. Well, we will see how it goes when it ends up here :)

    --
    Phillip Windell
    www.wandtv.com

    The views expressed, are my own and not those of my employer, or Microsoft,
    or anyone else associated with me, including my cats.
    -----------------------------------------------------
     
    Phillip Windell, Aug 28, 2008
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.