Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Is it possible to give a Windows Domain User account administrator rights on a single server? We have a vendor installing software and they are requiring domain administrator access to the machine.

share|improve this question
    
"and they are requiring domain administrator access to the machine" - I assume that's a typo and the word "domain" should not be in there? –  MDMarra Jul 10 '12 at 18:35
    
The answer has already been given and accepted. Still, shouldn't the ideal answer be 'kick the form which produced the software and tell them to come out of the stone ages?'. Most properly coded software does not need admin rights. /petpeeve. –  Hennes Jul 10 '12 at 22:02
1  
@Hennes: you typically need admin rights to do the installation, unless the application is only going to run when a particular user is logged on, which is unlikely for server software. –  Harry Johnston Jul 11 '12 at 4:23
    
I agree. During installation. The server administrator installs the software (after logging in with an account with admin priveleges). But the regular user account should not need it just to use the software. And yes, I know that this often fails to work. E.g. when software opens the registry without specifying that it want to READ (the default is RW). –  Hennes Jul 11 '12 at 12:55
    
@Hennes: certainly, but what does that have to do with this question? The people asking for admin access were installing the software, not using it. –  Harry Johnston Jul 11 '12 at 21:20

2 Answers 2

up vote 6 down vote accepted

If it's a member server, you can add them to local administrator group:

This won't work if it's a domain controller though -- there are no local accounts. You'd need to run the installer as a different user or temporarily elevate their account.

share|improve this answer

Yes, add them to the local administrators group on the server. You can do this from the command-lind as follows:

net localgroup administrators /add domain\user

You can also do this from the Users and Groups MMC snap-in.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.