Domain Admins no administrative rights to Vista machines
Wednesday, October 17th, 2007After joining a Sony notebook to the company’s domain & promptly restarting the notebook, I am able to login but I am unable to change anything that requires admin rights like making changes to User Account type, activating software, etc.
It seems that even domain admins have no rights on a newly joined Vista machine. The local administrator account have to explicitly give admin rights to domain administrator for him to be able to make any changes.
You will have to log out, then instead of selecting the default user shown, click other user then type localmachinename\username followed by your password. Then go to Control Panel, User Accounts to add your domain admin name, the domain & set his rights as administrator for the local machine before any control is given to him.
While you’re at it, you may also wish to Turn Off User Account Control if you have other softwares to install because you may face problem installing CS3 & others that may require activation, which is restricted by UAC.
You can turn it back on only after you have completed the initial setup of your new notebook.