locked
Vista Administrator Privileges RRS feed

  • Question

  • Vista Business edition is installed and it is joined to a domain.  A domain user has been added to the builtin administrators group.  When the user has logged in once to the network, their credentials are cached and they can log in not being connected to the network.  However, when the user is logged in, not connected to the network, they lose their administrator privileges.  To install an app, right click and say "Run as administrator", works when plugged in, doesn't work when is unplugged, then works when plugged back in.  There are not any GPO settings that would be affecting this.  Is there a Local Security setting or anything else that would allow this user to have administrator privileges when not connected to the network?
    Monday, June 22, 2009 3:28 PM

Answers

  • Hi,

     

    Thanks for posting in Microsoft TechNet Forum.

     

    For further troubleshooting, I would like to reproduce this kind of issue, so could you answer me the following questions:

     

    1.     Is this domain user added to the built-in domain administrator group or the built-in local administrator group? How do you add this domain user? Generally, we need to add it to the built-in local administrator group while using offline cached credential. There are two methods to add it.

     

    Method 1. Add an account to the built-in local administrator group through Computer Management.

     

    1)   Click the Start button, and type in: Computer Management.

    2)   Hit Enter and expand Local Users and Groups.

    3)   Click Users and right click Administrator in the right panel.

    4)   Click on Properties and click Member of button.

    5)   Click Add icon and type in user name under Enter the object names to select box.

    6)   Click OK twice.

     

    Method 2.  Add an account to the built-in local administrator group in Control Panel.

     

    1)   Open Control Panel by clicking the Start button and clicking on Control Panel.

    2)   Click Change account type under User Account.

    3)   Click the domain account and click Properties.

    4)   Check Administrator box and click OK twice.

     

    2.     Does this issue occur while connecting to none-domain network? Since you mentioned that you disconnect the network the issue occurs, this issue may be related to network configuration.

    3.     Have you tried to fresh cached credentials? You can try to locally create an administrator account then join it to a domain and see if the issue occurs.

     

    Please respond back with more information, and I will perform a deep investigation.

     

    Hope this helps. Thanks.

    Tuesday, June 23, 2009 9:18 AM
    Moderator

All replies

  • Hi,

     

    Thanks for posting in Microsoft TechNet Forum.

     

    For further troubleshooting, I would like to reproduce this kind of issue, so could you answer me the following questions:

     

    1.     Is this domain user added to the built-in domain administrator group or the built-in local administrator group? How do you add this domain user? Generally, we need to add it to the built-in local administrator group while using offline cached credential. There are two methods to add it.

     

    Method 1. Add an account to the built-in local administrator group through Computer Management.

     

    1)   Click the Start button, and type in: Computer Management.

    2)   Hit Enter and expand Local Users and Groups.

    3)   Click Users and right click Administrator in the right panel.

    4)   Click on Properties and click Member of button.

    5)   Click Add icon and type in user name under Enter the object names to select box.

    6)   Click OK twice.

     

    Method 2.  Add an account to the built-in local administrator group in Control Panel.

     

    1)   Open Control Panel by clicking the Start button and clicking on Control Panel.

    2)   Click Change account type under User Account.

    3)   Click the domain account and click Properties.

    4)   Check Administrator box and click OK twice.

     

    2.     Does this issue occur while connecting to none-domain network? Since you mentioned that you disconnect the network the issue occurs, this issue may be related to network configuration.

    3.     Have you tried to fresh cached credentials? You can try to locally create an administrator account then join it to a domain and see if the issue occurs.

     

    Please respond back with more information, and I will perform a deep investigation.

     

    Hope this helps. Thanks.

    Tuesday, June 23, 2009 9:18 AM
    Moderator
  • i also have the same problem, i live in a dorm room. This room comes with Ethernet connections on the walls and as a policy, users are not allowed to connect a router. When i plugged in my computer, i noticed that after a restart, i could not access some files and  install certain programs. When i check to see the network, i can see a lot of other people's computers, i am not an admin in the system. But i am an admin on my personal computer.

    The system i am currently running is a clean install, so there is no possibility of a virus and i have checked before i reinstalled. In fact, i partitioned my disks again.

    i am currently on Vista x64 SP2.
    Saturday, September 12, 2009 1:09 AM