Local admin versus domain admin on windows 2008

[BrianB]

We have several x32 2008 std servers that we are testing with. They belong
to the domain and the local administrators group contains the domain admins
group. We are moving an app from a 2003 server to a 2008 server. When
trying to install a custom service, we get an access denied error with a
domain admin account. The only account that will create the service is the
local admin.

Is there a way to give the domain admins the same privilages as the local
admin account?

Thanks,
Brian

 

[Dusko Savatovic]

Re: Local admin versus domain admin on windows 2008

When you join computer to a domain, domain admins global group automaticaly
becomes member of local administrators group, therefore giving local admin
privileges to domain admins. Windows Server 2008 has same security
enhancements as Vista, so you have UAC turned on by default. When you are
logged on as domain admin, you should start privileged operation with "Run
as administrator" option.

Dush

"BrianB" <BrianB@discussions.microsoft.com> wrote in message
news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com...
> We have several x32 2008 std servers that we are testing with. They
> belong
> to the domain and the local administrators group contains the domain
> admins
> group. We are moving an app from a 2003 server to a 2008 server. When
> trying to install a custom service, we get an access denied error with a
> domain admin account. The only account that will create the service is
> the
> local admin.
>
> Is there a way to give the domain admins the same privilages as the local
> admin account?
>
> Thanks,
> Brian

 

[Bill Grant]

Re: Local admin versus domain admin on windows 2008

As Dusko pointed out, with UAC there is a big difference between a user
with administrator privilege and "the" administrator account.

"Dusko Savatovic" <nospam.savatovic@gmail.com> wrote in message
news:#eRA277BJHA.2476@TK2MSFTNGP06.phx.gbl...
> When you join computer to a domain, domain admins global group
> automaticaly becomes member of local administrators group, therefore
> giving local admin privileges to domain admins. Windows Server 2008 has
> same security enhancements as Vista, so you have UAC turned on by default.
> When you are logged on as domain admin, you should start privileged
> operation with "Run as administrator" option.
>
> Dush
>
> "BrianB" <BrianB@discussions.microsoft.com> wrote in message
> news:3F0FF25B-767A-451C-AC2B-519322630EF1@microsoft.com...
>> We have several x32 2008 std servers that we are testing with. They
>> belong
>> to the domain and the local administrators group contains the domain
>> admins
>> group. We are moving an app from a 2003 server to a 2008 server. When
>> trying to install a custom service, we get an access denied error with a
>> domain admin account. The only account that will create the service is
>> the
>> local admin.
>>
>> Is there a way to give the domain admins the same privilages as the local
>> admin account?
>>
>> Thanks,
>> Brian
>

 

[Phillip Windell]

Re: Local admin versus domain admin on windows 2008

"Bill Grant" <not.available@online> wrote in message
news:uwkLtf9BJHA.4384@TK2MSFTNGP04.phx.gbl...
> As Dusko pointed out, with UAC there is a big difference between a user
> with administrator privilege and "the" administrator account.

Can the UAC be turned off like with Vista,..and then will it behave more
"normal". I totally dispise Vista due to some of that stuff and we still
won't run Vista here because of that. In few months we will probably be
introducing one '08 Server into the LAN as a Member Server.


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

 

[Phillip Windell]

Re: Local admin versus domain admin on windows 2008

"Phillip Windell" <philwindell@hotmail.com> wrote in message
news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl...
> Can the UAC be turned off like with Vista,..and then will it behave more
> "normal". I totally dispise Vista due to some of that stuff and we still
> won't run Vista here because of that. In few months we will probably be
> introducing one '08 Server into the LAN as a Member Server.

I left out the "?".
It was supposed to be a question


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

 

[Bill Grant]

Re: Local admin versus domain admin on windows 2008



"Phillip Windell" <philwindell@hotmail.com> wrote in message
news:OV4Nz$FCJHA.3496@TK2MSFTNGP03.phx.gbl...
> "Phillip Windell" <philwindell@hotmail.com> wrote in message
> news:%235OZkjECJHA.2476@TK2MSFTNGP06.phx.gbl...
>> Can the UAC be turned off like with Vista,..and then will it behave more
>> "normal". I totally dispise Vista due to some of that stuff and we still
>> won't run Vista here because of that. In few months we will probably be
>> introducing one '08 Server into the LAN as a Member Server.
>
> I left out the "?".
> It was supposed to be a question
>
>
> --
> Phillip Windell
> www.wandtv.com
>
> The views expressed, are my own and not those of my employer, or
> Microsoft,
> or anyone else associated with me, including my cats.
> -----------------------------------------------------
>
>
I can't think of any reason to do that. It is not as intrusive as UAC in
Vista. It is really just a matter of getting used to running installs etc
using "run as".

 

[Phillip Windell]

Re: Local admin versus domain admin on windows 2008

"Bill Grant" <not.available@online> wrote in message
news:eto4ljNCJHA.2476@TK2MSFTNGP06.phx.gbl...

> I can't think of any reason to do that. It is not as intrusive as UAC
> in Vista. It is really just a matter of getting used to running installs
> etc using "run as".

Ok. Well, we will see how it goes when it ends up here

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------