security question.

amyamandaallen

Hi,

I have the servers admin account which covers the local logon ( the one I used when I setup the server originally ). I presume this is not the same as the domain admin account? Although if the passwords are the same it sees it as the same?

Now if I add anyone as a administrator, I presume that they become a domain administrator and get included in active directory. But how do I setup a local administrator for the server? I cant see how to

This is probably worded as bad as a microsoft exam question but hopefully you will get my meaning.

Many thanks.

Smallguy

on client machines I always use

control userpasswords2 (winXP boxes)

which allows you to make them a local admin (on that machine) and not a domain admin

but you should be albe to create the local admin account from computer users and groups

as long as the system is not a DC

if it is a DC you need to do it through AD..and add them to the built-in administrators group.

I'm pretty sure (atleast on my 2000 DC) that the built-in admin group is not part of the Domain admins by default. unfortunately I do;nt have a 2003 DC at my disposal ot check for you

RTmarc

You cannot log into a domain controller locally; with the exception of Directory Recovery Mode (Safe Mode for DCs).

Smallguy

RTmarc wrote:

You cannot log into a domain controller locally; with the exception of Directory Recovery Mode (Safe Mode for DCs).

maybe your right but I just found

http://technet2.microsoft.com/WindowsServer/en/library/f8045387-ab2e-4e19-aafa-55880c1c286b1033.mspx?mfr=true

http://support.microsoft.com/kb/234237

if what we are talking about is being able to choose whether to log on to This machine or the domain then RTmarc is correct

amyamandaallen

it is a DC

Thanks for replys