Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: PLEASE HELP! Active Dir/Admin Permissions

10 Nov 2009   #1
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 
PLEASE HELP! Active Dir/Admin Permissions

Where do I begin?

Initially I had my computer with Win XP connected to the MC domain. I am granted rights to my pc. I was able to install software without ANY problems.

This weekend, I installed Win 7 Enterprise. First I installed my own local username (lemur) for installation purposes - with admin rights by default. So far, so good.

I added our domain (mc.uky.edu) and was able to login in with my univerity-wide username - mark1. And I successfully connected.

So I am logged in as mark1 on the MC domain.

My problem is installing new software. If I install, say, FF, I will be prompted "Do you want to allow the following program to make changes to this computer". It asks for an administrator password under the domain:mc.

When I enter the "mark1" and the password, it's not accepted.

NOW, if I enter my local computer address (this means I'm going OUTSIDE of the domain) and password, it's accepted.

This can't be right. Surely I should not be expected to do this, and it's cumbersome. Is there a way to prevent Win 7 from asking "Do you want to allow the following program to make changes to this computer"?

Again, this worked perfectly on XP without problem.

Thank you for your time, consideration and comments.

Lemur


My System SpecsSystem Spec
.
10 Nov 2009   #2
patwhatsthat

Windows 7 Ultimate 64bit
 
 

Well, I'm sorry and I know it's kind of a pain, but that's exactly how it's suppose to behave. Domain users are not by default users with "elevated" permissions so there is a bunch of stuff they can't do and one of them is installing software. The prompt is simply the new UAC "User Account Control" which didn't exist in XP, but you should have still been denied access or prompted for a admin or power user password. My suggestion is to have the domain administrator add your specific domain user account to the local admins group, or just simply log on locally instead of onto the domain when you want to do something like install new software. Hope this helps.
My System SpecsSystem Spec
10 Nov 2009   #3
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 

Oh... I have no control over the domain. I have to request permission to change anything. But please keep in mind all worked well under X?
My System SpecsSystem Spec
.

10 Nov 2009   #4
patwhatsthat

Windows 7 Ultimate 64bit
 
 

Don't want to go back and fourth about whether it worked on your previous install of XP or not, I will simply say that if your XP computer was a member (computer joined to the domain) of a domain. Then your issues would be the same except for the prompting by the UAC feature which is new to Win7...of course you can turn off UAC in control panel, however as a simple domain user that hasn't been granted local admin rights on your local machine you are still going to get prompted for a username and password who has elevated privledges.
My System SpecsSystem Spec
10 Nov 2009   #5
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 

Thanks. Well I'm gonna stand up for my "rights"! I have a ticket in. Let's see what they can do for me. Unless they say the don't support 7.
My System SpecsSystem Spec
10 Nov 2009   #6
patwhatsthat

Windows 7 Ultimate 64bit
 
 

I'm sure they have a plan to address this, one of the domain admins can have it done it about a half dozen clicks, however be prepared to just be told to use your local login to do installation and maintenance and to use your domain login to access domain resources. As a domain user logged on to your local machine, you are going to have problems with everything from windows updates to defraggin your local drive so be prepared to get into the groove
My System SpecsSystem Spec
10 Nov 2009   #7
Jordus

Windows Vista Business / Windows 7 Ultimate
 
 

Are you sure you are logging in right? A lot of the Vista/7 prompt boxes require you to type in your domain credentials UPN or domain\username style.

Make sure that at the bottom of the UAC box it says "DOMAIN: MC" and not the name of the local computer.

Did you also make sure that your domain account isnt being taken back out of the local admin group by a restricted groups policy?
My System SpecsSystem Spec
10 Nov 2009   #8
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 

Quote   Quote: Originally Posted by Jordus View Post
Are you sure you are logging in right? A lot of the Vista/7 prompt boxes require you to type in your domain credentials UPN or domain\username style.

Make sure that at the bottom of the UAC box it says "DOMAIN: MC" and not the name of the local computer.

Did you also make sure that your domain account isnt being taken back out of the local admin group by a restricted groups policy?
Yep. I'm logged onto the domain, so that's not a problem.

I contact the powers that be and, hopefully, they will provide admin for local, all PCs on my OU, and my servers.
My System SpecsSystem Spec
10 Nov 2009   #9
Lemur

Systems 1 and 2: Windows 7 Enterprise x64, Win 8 Developer
 
 

So, while I am waiting for IT to provide rights, there is another PRESSING issue.
I'm currently logged on locally (not through domain).

I have unfortunately noticed when I'm logged onto the domain, my #2 core goes to 100% and brings my pc to a standstill. This is very painful. Fast processor and 8GB memory (this is my work pc). Again, everything is cool when not logged onto domain.

Any thoughts?

Gracias!
My System SpecsSystem Spec
10 Nov 2009   #10
patwhatsthat

Windows 7 Ultimate 64bit
 
 

Look in task manager use show processes for all users button go to processes tab and click the heading CPU to sort and see what processes are making the demands on your computer. In your environment their maybe a lot of domain policies that are completing in the background. How long does the computer #2 processor stay at 100%
My System SpecsSystem Spec
Reply

 PLEASE HELP! Active Dir/Admin Permissions




Thread Tools




Similar help and support threads
Thread Forum
net user Administrator /active:yes activates account admin, not Admini
I want to activate the default Administrator account. After I enter the command "net user Administrator /active:yes", an administrator account named "admin", not "Administrator", appears. Since what I want is Administrator, not admin, I try to change account name from admin to Administrator. I get...
Installation & Setup
How To? Granting specific permissions to non admin accounts.
I have an account set up for my girlfriend which contains a password on the username. I would use a shared account but I do not want her to have the escalated security levels, which could potentially harm my computer. Well, I have a pain in the butt wireless adapter which on occasion only wants...
System Security
Hosts: always Access Denied or asking for Admin permissions
So I've been trying to modify my hosts file for a while now. On and off because I was fed up with searching and trying different things then always ending up failing. So that is why I am posting on this forum, asking for help from you guys. So far I have tried: Unchecking Read-Only for the...
General Discussion
a problem with admin permissions
I can't access my word files or word itself, i've uninstalled it and now i cant install a new version as i get messages saying i dont have sufficient permission. i'm not sure how to configure my user permissions..does anybody know how i do this??
General Discussion
No Admin Account Active
I have a problem and I need to avoid having to format the pc, so I hope someone can help me. I was playing around with the settings and changed my account type to user thinking its safer, then I got tired of having to choose the user account on startup every time so I logged in as Admin and...
System Security
No Admin permissions, appear to be logged in as Guest?
First noticed this when trying to delete a folder the other day and have yet to find an answer - tells me that I "require permission from S-1-5-21-515967899-96394560-1801674531-1003 to make changed to this folder". Since then I've also run into issues installing programs where I lack the...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 22:05.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App