I am trying to add a domain account to the local Administrators group on a Windows XP Pro workstation. My network is Windows 2003 / Active Directory.

On a Windows XP workstation:

Administrative Tools > Computer Management > Local Users and Groups > Groups

I open the Administrator group, then press "Add..." The only thing in the "From this location" box is the local machine I'm working on, so I press the "Locations" button. In the resulting window, there is no other option to select from. The only icon in that window is the local machine.

Consequently, I cannot add a domain account to the local Administrators group.

Notes:

--The Domain Adminstrator and a Local user account are currently part of the machine's administrator group.

--Able to login on the machine as Domain administrator

-- The computer has been added to the domain. Active directory is completely aware of the machine and it functions normally in the domain aside from this issue.

-- Was able to login as the domain user on the machine and a profile was created. However, need to add the domain user account to local admin group to be able to run/test a program.

Curlyben

Try this on the local machine.
Start > Control Panel > User accounts > Add the user there with the domain info. to local admin.

Tushars

can you please tell me what is your achievements?

iali

If you still have this problem, just go to the computer management ==> groups > Administrators ==>Add==>domain name \username

And you sholud be good to go.

You can do this by group policy aswell.

Thanks,

Irfan Ali.

chuckhole

If the computer is unable to browse the domain even though the machine is a member of the domain, it may have a corrupt machine account. Go to the Event Logs and look in the System Log. Do you see any Kerberos errors or DCOM errors?

The best step to take is to remove the machine from the domain and then add it back to the domain. Make sure you know what the local Administrator account password is before your reboot.

khan021

i go with irfan ali.

i think it will work for this.

yourcomputerguy

hello,

please verify that your xp workstation has ONLY the DNS entry for your dns server/domain controller.

you can check/change this by:
control panel > network > right-click the network connection used > properties > tcp/ip (properties)

also, of course, ensure the workstation is on the same local network as your domain controller, or properly connected by a vpn if that's your thing.