Windows 10: Windows 10 Local Administrators Group AND Active Directory Domain Admins Group

Is there a justification to add the domain admins group into the local Windows 10 administrators group. There seems to be a risk here or at least one risk anyway with adding these elevated accounts. We have the local administrator account enabled and are using LAPS to manage the password. We do have a desktop support account added to this group to manage the desktop.

:)

 

admin rights keep disappearing!?!!

Hi guys,

I am actually having a problem at work that our IT department hasn't been able to figure out. I am supposed to be a member of the admin group. We are on a domain. The problem is that everytime I reboot the computer I loose my admin rights(no longer in the administrator group) and just become a normal user again. I have tried googling this and didn't get to many results.
I believe IT is just giving me local admin rights, not admin rights for the whole domain.

Any suggestions?

EDIT: It is on Windows XP Pro.

 

How to add a domain user to Administrators group in Windows 10

To add an account as a member of the administrators group you need to be a local administrator already and you need to have rights to read the active directory information. A normal user can do this so what you want to do should be possible:

1. log on as local admin
   
2. connect on the VPN
   
3. open Start | Computer Management | Local Users and Groups (or run lusrmgr.msc)
   
4. double-click on the 'Administrators' group
   
5. click the 'Add...' button
   

At this point, because you are on the VPN and the machine is a member of the domain, you should be able to click on the 'Locations...' button and select the domain as the location of the user list. At some point an authentication dialogue should pop up and you will need to enter your normal domain credentials.

 

Grant a Local Administrator Privileges for Domain User

Hi Ali Swadi,



Thank you for writing to Microsoft Community Forums.



As Bill Smithers rightly mentioned in the above post,
TechNet would be the forums for your query regarding setting group policies on domain environment.



For basic information, you may want to refer the following articles:

• Active Directory Accounts
  
• Local Accounts
  
• Appendix H: Securing Local
  Administrator Accounts and Group
  
• Windows Server 2012: How to Add an
  Account to a Local Administrator Group
  

Regards,

Prakhar Khare

Microsoft Community – Moderator