Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Whenever I reboot Windows 7, I find that my domain user, under which I login and work, is not any more part of local Administrators group (or any groups included into Administrators group or domain administrators group) which is the result of domain policies applied during reboot.

So, I have to add my domain user to local machine Administrators group upon each reboot. I thought, only administrators can add users to Administrators group. So, why is it possible that non-admin user can add herself to administrators?

I am also puzzled by this situation because I beleived that some of the rights/accesses require reboot in order adding to admin group would take force but on rebooting the domain policies exclude my domain users from Administrators group, then I add "myself" to administrators group.

share|improve this question
    
I would ask you IT Admin the reason this is possible. –  Ramhound Nov 28 '13 at 4:15
    
If you're not admin, you can't even access Computer Management page (which I tend to use to add user into Local Administrator group). Your current domain username MAY be part of another Domain Group which is member of the Local Administrator group (that you somehow not aware of). The removal of your Domain\User from the Local Admin group does not remove you from whatever Domain Group that may have admin right on the machine. –  Darius Nov 28 '13 at 6:34
    
@Ramhound , thanks I've asked. They do not even know why my account is continuously kicked out of Administrators group on each reboot. The funny thing is that this happen on my local workstation while my domain user sticks with Administrators group on dozens of remote servers –  Fulproof Nov 28 '13 at 8:18
    
@Darius , I know. But this is my question: "Whether is it possible and how that my account is administor without being part of any group giving administrator membership"? –  Fulproof Nov 28 '13 at 8:19
    
@Fulproof - The simple answer is that your account is still a domain administrator, domain permissions override local, permissins –  Ramhound Nov 29 '13 at 1:01

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.