I have added two domain users to a Win2008 server (non-domain controller) as local administrators. However these two users still have very limited rights, such as not being able to modify local Internet Security Properties. Is there another setting overriding their local admin permissions that they are supposed to have?

  • 1
    Have you any Group Policies in place which may be enforcing these settings? – jscott Sep 30 '10 at 20:32
  • This is similar to my question[serverfault.com/questions/186039/… One way is to turn off UAC but I am waiting for a better answer as well. – softveda Sep 30 '10 at 20:37
  • @pratik - you can right click and "Run as Administrator" in order to force elevation. UAC should almost never be disabled. – Mark Allen Oct 1 '10 at 20:55
  • In my case I am running a automatic non-interactive build script. There is no way I can "right click". – softveda Oct 5 '10 at 0:25
  • gotcha. will consider instead of permanently lifting restrictions – marcwenger Oct 5 '10 at 2:01

Make sure you're "elevating" before doing anything that requires administrative rights. Being a member of the local administrators group means that when you get prompted, it's just to click "Ok" vs. having to provide a separate user name and password.

  • 1
    You shouldn't disable UAC, instead simply answer the prompt – Jim B Oct 1 '10 at 0:09
  • Agreed, please don't disable UAC! That can be dangerous. It's really nice to be able to have admin rights and yet not be able to use them by accident. – Mark Allen Oct 1 '10 at 20:54

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.