Windows 10: Adding Domain User as Local Admin

Hi there,


We are trying to set up the computer of one of our remote employees in house and are running into the issue that every time a setting is changed or a program is installed, it is requiring an administrator password from our domain. We don't want this meaning having to put the domain admin password in every time but keeping the domain on the computer is necessary for some of the software our company uses. Is there any way to make the domain user / local user an admin on the machine but not over the domain itself?

:)

 

Can't login as local user after adding a computer to a domain


Here are the steps I took. Please tell me if I should have done differently.

1. On the server end add the user and computer to the domain in advance.

2. Fresh install windows 10 and make the first username Admin.

3. Once at desktop rename PC to match PC name on domain i.e. Workstation001.

4. Add computer to mydomain.local and when asked for username and password I entered the credentials for the new user.

5. Restarted the PC and signed into mydomain\newuser without any problems.

However now when I try to access the original local Admin account by typing 'Workstation001\local Admin' as the username and then the password. It keeps saying password invalid.

So I logged back into the domain account and tried resetting the password to Admin and then tried signing in as admin again, still no luck.

Currently there are 2 accounts on the computer one of them is a local/domain account for newuser and the other is a local Admin account which I cannot access.

What kind of glitch is this? Should I have not joined the domain through the original Admin account and instead added a local user to the PC 'newuser' and then sign in as that user locally then add them to the domain through their own local account? I didn't think this was necessary.

 

Can't login as local user after adding a computer to a domain

Your logon username for local is incorrect.

If the username created was "Admin", then the local machine logon is:

Workstation001\Admin (Omit "Local") It already knows you are logging onto the machine from the machine header.

 

GPO local admin access for Domain user

Hi,

I have a question regarding the GPO that I created for certain domain user to get local admin access in their computer.

I have created new GPO in domain and do the setting as what I have learned.

They policy I enabled located at Computer Configuration but not User Configuration.

The question is :

If User A have local admin access logon on his PC, are User B or following user able to gain this local access right too when they logon into the same PC?

Regards,

Keith