Administrative Privilages...

Hi all,

I installed windows 2003 and xp2 in my vmware. I installed ADS in that and i created some users. everything is ok. Then i added some users into administrators group, but they are unable to change any administrative tasks in client system. They are unable to change even system time also. I put that users in the groups where the administrator itself is the member in that groups. Then i logged with that user and want to change the system time , then also it showing the message "you do not have the proper privilege levels to change the system time". I am able to change the time using local administrator and domain administrator. I installed in different systems then also it showing the same problem. Previously i worked on this vmware, but i didnt get this type of problem.

plz help me.


Thanku.

Many particular options are controlled in the Local Security Policy settings. (Control Panel -> Local Security Policy)... Inside go to Local Policies -> User Rights Assignment. For the time, look at "Change the System Time". Most of these options will have the Administrators group assigned, however check it out to be sure.

Added to what valkyrnash suggested.

Right click on the "domain administrator" account, click properties and go to the "member of" tab (or what ever it's called there). Make sure that ALL those groups that appear here are also added to your new administrator account. And remove ANY other groups from the new administrator account. I know you've done this, but just to keep out doubts.

Hi S0lo and valkyrnash,

I did all u said S0lo but no result. before that i didnt face this type of problem. if i add to administrators group then that user is able to change the setting in the clients. then what happened to that? why its not working properly?
if i add the user into all the groups where the administrator is the member then the user is able to change the settings and again i removed one by one group and tried to change its all working fine. then i removed all groups and again tried to change then its not working. again same problem came.

Valkyrnash i didnt understand what u suggest "(Control Panel -> Local Security Policy". we have domain environment. in that i didnt find Local security policy settings.

Thanku and help me.

if i add the user into all the groups where the administrator is the member then the user is able to change the settings

If I understand it well. You reached a state were the new user is able to do administrative work (i.e. change the settings). So why not keep it at that state? Please explain a bit.

Hi solo,
Thanks for ur quick response...

I put a normal user into all the groups where the administrator is the member of those groups. Now its working fine. The user is able to do all the tasks. We cant put all the administrators into these groups. Its not safe and its not a good thing for an organization. If i put all the administrators in these groups then there is a chance to misuse the privileges. We have to give different privileges to different administrators.

Previously i didn't face this type of problems. I created a domain with 2 clients at my home(not in vmware). Their also i am getting the same problem.