Windows 10: Domain Admin account does not have admin privileges on domain Win10 and Windows 11...

EnvironmentC/AD: Windows Server 2022Workstation: Windows 10 and 11 Issue:I have two accounts that belong to "Domain Admins" and "Administrators" groups, the domain admin accounts are denied elevated privileges on client Windows 10 and 11 machine, and it is continually prompted for elevated admin rights. I cannot pinpoint what may have caused it. CMD "whoami /groups" shows the following. What may be the issue?

:)

 

Add A Domain Admin Group as Admin on Windows 11

PLEASE NO RESPONSES FROM DIRECTLY EXPERTS UNLESS YOU 100% KNOW THE ANSWER TO THIS SITUATION. Thank You

Hello

Background: One of my clients uses AD to manager their users and machines. The site manager who is an ADMIN user in AD was having difficulty installing apps on her new PC because it kept telling her that her user account did not have Admin privileges (She is logged in as her domain user which does have admin privileges). I figured out that I needed to perform the following steps to give her admin privileges on Windows 11 despite her domain user having full admin rights.

Open Control Panel. Type admin in the Control panel Search bar. Under USER ACCOUNTS click on 'Give administrative rights to a domain user'.

In the window that opens up click ADD.

Enter the username and domain info for the user who should have administrator rights on this PC. Click OK. Then click next.

Select Administrator level access

Click Next, Then Click Finish.

Now this Domain User has Admin privileges on this Windows 11 PC

So Now My Question: How can I tell a Windows 11 PC that is joined to the domain that all domain Users who are a part of a specific Domain Group (Administrators or AdminTemp for example) should have admin rights on the Windows 11 PC from the moment they login for the first time? It will be tedious to have to add each and every admin user in each instance, especially since new employees are added to AdminTemp for only 1 week after hire then they are reduced to standard user permissions via AD.

 

Domain admin account as built-in admin account


I just upgraded two brand new pc's from Win 7 to Win 10. Computers were already added to the domain in Win 7 and I was logged into the domain administrator account when I did the upgrade to Win 10. Now when I am logged in with the domain administrator account, I can't open Edge. It says "This app can't open. Microsoft Edge can't be opened using the Built-in Administrator account. Sign in with a different account and try again."

How do I get the local "Administrator" account to be the Built-in administrator account?

The list of user accounts are:
admin (local admin account I made in Win 7)
Administrator (I assume local administrator account that is automatically created)
administrator.AESSEINVLTD (domain admin account I am logged in with)
Default.migrated
Public.

 

Question for some1 with windows domain knowledge

I know there isnt a whole lot of server admins here, but I thought I would ask.

At my work we had our office domain server go down due to windows corruption. Since they have still been able to login to their accounts using the server that went down. So they picked the ADMIN domain in the their drop down list.

Now that i'm rebuilding the ADMIN server I want to make sure they can use the same accounts and still have all of their my documents data and such. I want to know where is their ADMIN user data and authentication being kept. Would it be the other domain on the network? or on their local machines?

Note* there is no trust setup from what i can tell between the two servers. And their accounts dont exist in active directory on the other server.

Any help is appreciated