0

Having started in a new place recently, I've been tasked with setting up 2 new workstations, however I'm having a hard time figuring out exactly how the workstations here were configured in the past, and no one seems to be entirely sure.

The existing workstations (laptops), are all set up to be part of the domain here, but the users log on locally, and there are no accounts from the domain that are actually added to the workstations. If you use Windows utility to view the accounts on the computer, there is simply the one local account which is a member of the Administrator group. However, if you try to take any action that requires admin privileges on these workstations, you will have to input the domain administrator credentials in order to gain permission.

With the new workstations however, if I simply join the domain, the local users (which appear to be identical to those of the older workstations) do not require domain administrator credentials for anything - why is that?

I'd like to figure out how the accounts on the newer and the older workstations differ, but I'm a little lost at the moment.

6
  • Can you try inputting local administrator credentials instead on the old machine? Apparently there is difference in level of User Account Control sensitivity. Also, I think I've seen a Group Policy that would ask full credentials instead of prompting for yes or no when it comes to elevation. Jul 21, 2016 at 11:14
  • Hey Grigory, inputting local adminstrator credentials on the old machine doesn't work for authentication (I just tried), it also specifically specifies, underneath the login box, that it is the domain which requires the login. Also on the new machine, it does not even prompt for yes or no, it simply allows me to take whatever action I want, without requiring any elevation whatsoever.
    – Ceds
    Jul 21, 2016 at 11:18
  • Old machine: prepend login with dot backslash .\administrator Jul 21, 2016 at 11:20
  • Compare user account control level on both machines, new one has higher level, most probably. Jul 21, 2016 at 11:21
  • I feel absolutely silly now, you're brilliant and totally right, it had to do with UAC all along. Thanks!
    – Ceds
    Jul 21, 2016 at 11:54

1 Answer 1

0

Apparently there is difference in level of User Account Control sensitivity.

Also, I think I've seen a Group Policy that would ask full credentials instead of prompting for yes or no when it comes to elevation.

As per comments.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .