My question is ...
How do I grant domain admins the same rights at the local built in account "Administrator" when I add a new server to the domain to avoid domain admins having to constantly escalate permissions beyond what they seem to have?
This seems to be causing some confusion so ...
I have a domain, with a domain admins group of which I am a member. I have a new server, just joined the domain, and on that server I can login because the local group "Administrators" has member "Domain Admins".
So I as a domain admin on this server am also considered to be a local Admin too.
Now lets say I want to install a new applciation on the server and this requires admin rights.
I right click the installer, I then select "Run as Administrator" and get the usual UAC dialog pop up.
I put MY credentials in there (from my domain account, the same credentials I used to login to the server with) ... and it rejects those credentials with the validation message ... "The requested operation requires elevation".
So my question is ...
Why are my domain administrator credentials not enough to allow me to act as a local administrator on the box when I am in the Domain Admins group which is a member of the local Administrators group?
Instead I have to "elevate" my permissions to the account named "Administrator" on the local machine before my Account is granted the rights to do the install.