Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The administrators aren't admins on the computers that we connect to the domain so we have to login with a local admin and upgrade peoples accounts manually. How can we make the local accounts match the domain accounts?

share|improve this question
Are you using Active Directory to store all your users on a dedicated server? or do you run local accounts on every machine and create local accounts for all users? – Joe S Oct 31 '11 at 22:24
@JoeSafe The AD has our users. When I (that is in the domain group administrators) log into a colleagues computer, I won't be an administrator but have to upgrade my account on that computer. – Kit Sunde Nov 1 '11 at 5:16
OK, SORRY, just to check one more thing, you don't have any local accounts created with the same name on the names? So like your username on AD is Joe, you then don't have a local account called Joe as well on that machine do you? – Joe S Nov 1 '11 at 18:59
@JoeSafe No when I signed in with my AD account to the computer, it had never been used before. – Kit Sunde Nov 2 '11 at 5:53

well anyone in the Domain Admins group should be administrator on the machines, it is pretty standard to have Domain Admins in the local Administrators group, but if you handle things differently, say with a "Workstation Admins" group, then you will need to create a GPO.

These two sites may help:

share|improve this answer

Odd.. if you login to an AD domain-joined computer with an account in the Domain Admins group, you should have administrator rights on the machine. It takes a lot of extra work to make things not happens this way. Are you sure this isn't an elevation issue (ie: windows 7 will still require you to explicitly choose to run things as administrator now)?

Look in the local administrators group on the machine and make sure that {YourDomin}\Domain Admins is a member.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .