Domain User Make Local Admin
We have an ad domain user not a domain admin and we want to give that user admin rights to one server that is joined to our domain.
Domain user make local admin. Select the local admin gpo. If you want your domain user to be a local admin on the windows 10 pro pc you have to make sure the domain user is added to the admin group. We don t want to give the user domain admin rights or admin rights to other servers. From the local users and groups snap in browse to groups double click on the administrators group locate your domain user account grant him her membership to the administrators.
However even if you do that you will still get pop ups saying you don t have permission. Make sure all pcs you want to access should be move to an ou and properly link above gpo. Increase the permissions of the domain user on the local pc by adding the user in question in the local machine s power users or administrators group. Press win x to run command prompt admin.
Win r lusrmgr msc. Add user to local administrator group via net user command. You should see local admin in that group now. This happens because once you join a domain in windows 10 pro it adds domain users to the user role.
Login into windows server 2012 r2 with administrator and then do as following. This is by far the preferred method limited to the cases when it is absolutely necessary to do so as it only gives the minimum amount of permissions required to reach the goal. I know how to make a domain user an admin on a non server machine joined to the domain but have not ever tried to do this on.