Active Directory question...

[Mizugori]

I created a new user account, and when I log into it it works fine but it has many limitations. I feel like every time I try to do anything remotely 'advanced' I get a popup saying I don't have permissions. Can't uninstall a lot of things, can't go into the tcp/ip settings, etc etc

Where are these permissions coming from? I have access to the administrator account, I just don't know how to make one user more privileged than another...

Thanks

 

[MrChad]

Your user account needs be a member of the local machine's Administrator group. Alternatively, you can add the user account to the Domain Administrators group in AD and have admin access to all machines in the domain.

 

[Mizugori]

ok i know you guys all think i am retarded but allow me to explain a bit. these steps are basically what i did, only when i go to from this location i cannot select the domain... it only shows the computers name and i can't change it. so i got confused and thought i was doing it wrong, started googling how to make a local admin, and then posted here. but apparently i am doing it right... so any ideas why i cant select the domain there?

On the local system:

1. Right Click My Computer
2. Choose Manage
3. Expand Local Users and Groups
4. Click on Groups
5. Double click Administrators
6. Click Add...
7. Make sure the "From this Location:" says the name of your domain
8. Under Enter the object names to select (examples):, put in the username
9. Click Check Names
10. Click OK
11. Click OK again
12. Logout
13. Have the user login

 

[Snapster]

Sounds like the computer is dis-joined from the domain if you cannot see it during login nor selectable during location browsing. For domain admin rights to propagate down it has to be connected to the domain so it can receive the rights of the domain user you login as.

 

[LittleNemoNES]

To elaborate on what other have said, you should join the PC to the domain

Remember to add domain users or domain admins group to the account in AD.

 

[RebateMonger]

Another possibility is incorrect DNS setup. If the PC can't find the Domain Controller via DNS, you won't get the list of Domain Accounts. If the PC appears to be correctly joined to the Domain, then check out DNS settings and verify the connection to the DC.

 

[Mizugori]

I needed to manually set the dns server on the workstation in the end

 

[Nothinman]

I needed to manually set the dns server on the workstation in the end

Then you need to fix your DHCP server to hand out the proper DNS entries.