Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista account administration

Vista - Domain user in local administrators != administrator

Reply
 
Old 09-19-2006   #1 (permalink)
=?Utf-8?B?RGFyaW4gRHVnYW4=?=


 
 

Domain user in local administrators != administrator

Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
Have added a domain user account to the local administrators group (in
addition to the local administrator). However, this account doesn't seem to
actually get admin rights. Repro steps:

runas /userOMAIN\adminuser cmd
<enter DOMAIN\adminuser passwd>
....in the resulting DOMAIN\adminuser cmd window:
ipconfig /flushdns
The requested operation requires elevation.


In contrast:
runas /user:administrator cmd
<enter administrator passwd>
....in the resulting administrator cmd window:
ipconfig /flushdns

Successfully flushed the DNS Resolver Cache.


This is but one example. Is this a UAC bug?
Cheers.

My System SpecsSystem Spec
Old 09-19-2006   #2 (permalink)
=?Utf-8?B?RGFyaW4gRHVnYW4=?=


 
 

RE: Domain user in local administrators != administrator

Ok, so maybe I'm starting to understand the concept here, thanks to Jim's
excellent info at www.jimmah.com. Command line programs don't prompt for
administrative access. So to open an admin-level command prompt properly I
shouldn't use "runas /userOMAIN\user cmd" as I have become accustomed, but
i can have a shortcut to cmd.exe and right-click, choose run as
administrator, then enter DOMAIN\user and the associated password. Better
yet, go to the advanced properties of the shortcut and tell it to always run
as administrator.

Now, is there any way to always run as a specific administrator? I'm quite
accustomed to double-clicking on a shortcut and then typing my DOMAIN\user
password. With this new method I need to double-click then select the
appropriate admin account or choose other user and enter the username and
password both. Wow don't I sound petty.

Cheers.

"Darin Dugan" wrote:

> Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
> Have added a domain user account to the local administrators group (in
> addition to the local administrator). However, this account doesn't seem to
> actually get admin rights. Repro steps:
>
> runas /userOMAIN\adminuser cmd
> <enter DOMAIN\adminuser passwd>
> ...in the resulting DOMAIN\adminuser cmd window:
> ipconfig /flushdns
> The requested operation requires elevation.
>
>
> In contrast:
> runas /user:administrator cmd
> <enter administrator passwd>
> ...in the resulting administrator cmd window:
> ipconfig /flushdns
>
> Successfully flushed the DNS Resolver Cache.
>
>
> This is but one example. Is this a UAC bug?
> Cheers.

My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Domain local power user PowerShell
Add NT 4 Domain User to Local Adminstrators Group Vista account administration
domain user can't be local administrator? Vista General
adding a domain user to the local group PowerShell
User Profiles Local vs Domain Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46