Domain user in local administrators != administrator

Posted: 09-19-2006, 02:12 PM
Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
Have added a domain user account to the local administrators group (in
addition to the local administrator). However, this account doesn't seem to
actually get admin rights. Repro steps:

runas /userOMAIN\adminuser cmd
<enter DOMAIN\adminuser passwd>
....in the resulting DOMAIN\adminuser cmd window:
ipconfig /flushdns
The requested operation requires elevation.


In contrast:
runas /user:administrator cmd
<enter administrator passwd>
....in the resulting administrator cmd window:
ipconfig /flushdns

Successfully flushed the DNS Resolver Cache.


This is but one example. Is this a UAC bug?
Cheers.
Reply With Quote

Responses to "Domain user in local administrators != administrator"

Darin Dugan
Guest
Posts: n/a
 
RE: Domain user in local administrators != administrator
Posted: 09-19-2006, 04:13 PM
Ok, so maybe I'm starting to understand the concept here, thanks to Jim's
excellent info at www.jimmah.com. Command line programs don't prompt for
administrative access. So to open an admin-level command prompt properly I
shouldn't use "runas /userOMAIN\user cmd" as I have become accustomed, but
i can have a shortcut to cmd.exe and right-click, choose run as
administrator, then enter DOMAIN\user and the associated password. Better
yet, go to the advanced properties of the shortcut and tell it to always run
as administrator.

Now, is there any way to always run as a specific administrator? I'm quite
accustomed to double-clicking on a shortcut and then typing my DOMAIN\user
password. With this new method I need to double-click then select the
appropriate admin account or choose other user and enter the username and
password both. Wow don't I sound petty.

Cheers.

"Darin Dugan" wrote:
> Vista RC1 on x86, clean install. Joined to Windows 2003 native mode domain.
> Have added a domain user account to the local administrators group (in
> addition to the local administrator). However, this account doesn't seem to
> actually get admin rights. Repro steps:
>
> runas /userOMAIN\adminuser cmd
> <enter DOMAIN\adminuser passwd>
> ...in the resulting DOMAIN\adminuser cmd window:
> ipconfig /flushdns
> The requested operation requires elevation.
>
>
> In contrast:
> runas /user:administrator cmd
> <enter administrator passwd>
> ...in the resulting administrator cmd window:
> ipconfig /flushdns
>
> Successfully flushed the DNS Resolver Cache.
>
>
> This is but one example. Is this a UAC bug?
> Cheers.
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
How can I add a Domain User as an Administrator to a specific Database in SQL2005? Guest Windows NT/2000/XP 0 02-27-2008 07:34 PM
SP2 problem: Add Domain users in the local Administrators group Dédé Windows XP Configuration & Management 4 11-25-2004 02:04 PM
Add Domain user to Local Group via vb script Jason Windows XP Configuration & Management 5 09-05-2004 09:06 PM
Make local computer user domain user too? Ken Very Big Liar Windows XP Help & Support 1 10-02-2003 02:16 AM
Adding user to Local Group Administrator tkotten Windows XP Security & Administration 0 07-02-2003 10:32 PM