Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have added two domain users to a Win2008 server (non-domain controller) as local administrators. However these two users still have very limited rights, such as not being able to modify local Internet Security Properties. Is there another setting overriding their local admin permissions that they are supposed to have?

share|improve this question
Have you any Group Policies in place which may be enforcing these settings? – jscott Sep 30 '10 at 20:32
This is similar to my question[… One way is to turn off UAC but I am waiting for a better answer as well. – pratik Sep 30 '10 at 20:37
@pratik - you can right click and "Run as Administrator" in order to force elevation. UAC should almost never be disabled. – Mark Allen Oct 1 '10 at 20:55
In my case I am running a automatic non-interactive build script. There is no way I can "right click". – pratik Oct 5 '10 at 0:25
gotcha. will consider instead of permanently lifting restrictions – marcwenger Oct 5 '10 at 2:01
up vote 0 down vote accepted

Make sure you're "elevating" before doing anything that requires administrative rights. Being a member of the local administrators group means that when you get prompted, it's just to click "Ok" vs. having to provide a separate user name and password.

share|improve this answer
Thanks. I disabled UAC for the time being. – marcwenger Sep 30 '10 at 23:25
You shouldn't disable UAC, instead simply answer the prompt – Jim B Oct 1 '10 at 0:09
Agreed, please don't disable UAC! That can be dangerous. It's really nice to be able to have admin rights and yet not be able to use them by accident. – Mark Allen Oct 1 '10 at 20:54

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.