Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a local user DOMAIN_ONE\me and another user DOMAIN_TWO\me . I wanted to make the user on DOMAIN_TWO\me an admin on this computer, but I'm not sure how to do this.

Any idea how I can make DOMAIN_TWO\me an admin for this computer (like DOMAIN_ONE\me?)

share|improve this question
what issue are you having adding the second user as admin? – pablo Feb 18 '11 at 22:22
Is there a trust between DOMAIN ONE and DOMAIN TWO? If yes, what kind? – icky3000 Feb 18 '11 at 22:25
DOMAIN ONE trusts DOMAIN TWO. DOMAIN ONE is the admin of the computer. DOMAIN TWO is my work account, but I can't install anything on it without admin permission from the admin on DOMAIN ONE. – tester Feb 18 '11 at 23:01
@icky3000, you're referring to a technical "trust" aren't you? I'm not sure what that is if it is some technical term. – tester Feb 18 '11 at 23:09
also this is windows 7 (not sure if that makes a difference) – tester Feb 18 '11 at 23:34
up vote 3 down vote accepted

So as I understand it, you have created a one-way Windows trust so that DOMAIN ONE trusts DOMAIN TWO. Given this, you should be able to assign permissions in DOMAIN ONE to objects in DOMAIN TWO.

To make DOMAIN TWO\me an admin on a computer in DOMAIN ONE, do this on the computer (assuming the computer is running Windows 2008, the procedure is very similar on 2003):

  1. Launch Server Manager from Start/Administrative Tools.
  2. Expand Configuration. Expand Local Users and Groups. Click on Groups.
  3. Double-click on the Administrators group.
  4. Click Add.
  5. The 'Select Users, Computers, or Groups' dialog box will open. Click on the Locations button.
  6. Select DOMAIN TWO from the list of locations and click OK.
  7. Enter the username of the user account in DOMAIN TWO (ie me) and click the Check Names button to make sure that name resolves properly to the right object. Click OK and then click OK again to close the Administrators group.

Given your first comment above about not being familiar with trusts, my guess is you just haven't ever used the Location button mentioned above but that's how you tell Windows you want to select users or groups from another domain so hopefully that helps?

share|improve this answer
this worked. Awesome. thank you! – tester Feb 18 '11 at 23:41

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.