Win2k - changing reg key to make user an administrator

[madman045]

A domain user has been added locally with debug user rights, they should have been given administrator rights.

I have logged on as the local administrator account & changed it to administrators, but when they log on, they still dont have the correct rights, i.e they cannot update norton AV & windowsupdate.

Does anyone know where in the registry I can change it to give them local administrator rights?

Thanks?

[Paul Adams]

In the registry? Shouldn't be required - if the domain user account is a member of the local Administrators group then it should be identical to the local Administrator user.

Of course, an application may have specifically put permissions on the local Administrator user instead of the Administrators group, in which case the app would need reconfiguring.

[Nox]

Sounds like you have a similar situation to us - in our case the domain admin group and acc is in the local admin group, but is missing some regular local admin privs (except getting into user manager) such as regedit - and thus not being able to instal progs...

Fortunately, no users have local admin... I am pretty sure its a policy setting rather than a registry setting - registry settings can be easily changed with a regular non-admin account if you know what you're doing.

On the down side, domain consolidation has meant a few users on another site have inherited this, but none that should have local admin... yet. So if it does get worse, i'll need to fix it, and will let you know the outcome.

But if i were you, just put a call in to your heldesk and give someone a fun morning, rather than run the risk of stuffing up something badly (let them do it!)

Other option is to have a look at the created groups on the machine, there may be more than one you need to be in...

Nox