Windows 10: Domain Users not receiving Local Administrators Permissions

Hey all,

I am currently testing Windows 10 for implementation at the company I am working at and so far everything is working pretty good. When setting up computers we always add Domain Users as a member of the local administrators group so to be able to have certain scripts and other things run.

Now I have done this on the computer I am testing Windows 10 on and have found that when running a batch script to write files to a folder under Program Files it gives an access denied error. I have checked and the local administrators group has full control to these folders but for whatever reason Domain Users is not receiving the same permissions.

I am running on build 10166 so not the latest build, but just wanted to know whether anyone else has encountered this (though wouldn't expect many places to have Domain Users as part of local admin group) and/or if later builds fix this?

Cheers.

:)

 

Locl Administrator

Local Administrator means that you are Administrator of your own ('local') computer. That is the highest permission user account on Windows 10. You can change anything that affects the computer.

In general, when moving from an older computer to a new computer you have to guard against carrying your older ideas with you. (Don't ask how I figured this out.) Windows 10 is not your old Windows with new stuff thrown in. Technology advances enormously
in just a few years, so you need to be ready to accept lots of change.

If you were a member of a network there could be a network administrator with permissions to make changes to the network that exceed your permissions. Also, if your computer is joined to a domain there is a domain administrator with permissions exceeding
yours to make changes that affect the domain. Local computers also have a built-in system account (not a user account) called Administrator that is intended to be a lifeline if you are locked out of your computer.

 

Windows 10

First make sure you've backed up any data that might be local to a USB drive or cloud.

Is it domain joined?

If no then just setup a new local account for the new user (as an administrator), login with the new account then delete the old (your) account

If yes then ensure that your domain administrator has created a new domain user account, then login to the laptop with the new account. Then delete the old account. However depending on the permissions you might not have rights to do this in which case
you will need to speak to your domain administrator for their assistance.