RPC Error Adding Domain Users To Local Admin Group
Apr 23, 2012
DC: Win Server 2003
Laptops: Win7 Pro
When joining a set of laptops to the domain it prompts for domain admin credentials and appears to be successful, but gives an error of 'Changing the Primary Domain DNS name of this computer to " " failed. The name will remain domain.local The error was: The RPC Server is unavailable.
When attempting to add Domain Users to the local administrators group: Windows cannot process the object with the name "domain users" because of the following error: The RPC server is unavailable.
This happens even when wired on the network. I have tried uncommenting the localhost line in HOSTS, and manually adding the DNS server (which is also the DC).
I'm trying to run a script at the end of sysprep that will add a Domain group to the local Admins group. I found a few scripts while searching around, but none will work for my application.
This is what I have so far.
Code :SET objNet = CREATEOBJECT("WScript.Network" )' Set the user you want to make local administrator herestrUser = "<username here>"strNetBIOSDomain = objNet.UserDomainstrComputer = objNet.ComputerNameSET objGroup = GETOBJECT("WinNT://" & strComputer & "/Administrators,group" )SET objUser = GETOBJECT("WinNT://" & strNetBIOSDomain & "/" & strUser & ",user" )' ignore error if user is already a member of the groupON ERROR RESUME NEXTobjGroup.Add(objUser.ADsPath)ON ERROR GOTO 0
The problem I'm having is that I need to be able to provide a username and password of a domain admin so that it can authenticate. how to do this when I try to add the user.
actually i put a server,and to create one system as a domain member , that was not installed properly that why i delete this active directory and reinstall and to make a domain members except that system
we upgraded from sbs2003 server to sbs2008 server. We removed the pc from the old domain and then added it to the new domain. Something went wrong after we joined the new domain it doesn't see the new domain for login and the local Administrator account has been disabled. The only account available is the guest account. Is there a way to enable the local administrator account again?
So a new box recently built, when booted, defaults to the local administrator account.This is a Windows 7 machine for a Linux guru that doesn't want to be bothered pressing more buttons than is necessary, if you get my drift. So my question is, after pressing Ctrl+Alt+Del...how do I dictate to Windows that the preferred used is "HisDomainAccount" on our company domain, as opposed to the local admin account?
I'd like to assign a few select "domain users" to be local admin over their test machines which log into a domain. The test machines are Windows 7 64bit and the domain is Win2k8 R2.
Not sure if this is where I should be posting this. Please redirect me if there is a better forum that I should use.I use my own laptop while working as a contractor. I am running Windows 7 ultimate x64 Sp1. The laptop uses homegroup to connect to other PCs whilst at home.To access network devices whilst at work I use the Cisco VPN client to attach to their network. This works great for most things I need to do, however,.If I need to access a shared directory on one of their servers the authenication window that appears.automatically adds my laptop name as a domain name. As this is not the domain of the server I fail to authenicate. The added domain name is not in the username box as in previous versions on windows but appears in the text part of the dialogue box so I cannot delete it.Is there any way that I can stop this from happening adn gain access to the files I need without resorting to a friendly staff member and a USB stick?
I Have doubt abt Domain level group policy! My question is i have many clients in my domain! i want to set Group policy for all clients using Domain controller! If new clients are been added to my domain. My group policy should be able to apply for the new client!
I have a Windows 7 PC that's joined to a domain. The network location says "Domain network" and cannot be changed. According to Microsoft, you must set your location to "Home" in order to be able to join a computer to an already existing HomeGroup.My advanced sharing settings for both Home and Domain (domain being the current profile) show all the sharing and discovery settings enabled. HomeGroup Listener and HomeGroup Provider services are started. My Windows Firewall is enabled. I can connect to \computername of my HomeGroup computers.However, I cannot join the HomeGroup. It says "There is currently no homegroup on your network." [URL]I verified the group policy settings do not prohibit me from changing my network location from Domain to Home so that I may join a HomeGroup. However, I still cannot click on "Domain network" in order to change it to Home.How can I join this computer to the HomeGroup?
I want to give the ability to the user group to turn off instantly aero (using either the right click or normal shortcuts described in the tutorials) without revealing my administrator pass to them (or have to be there to type it).
This also is a solution for x64 apps (That have grayed out these options in compability tab, it is a win 7 bug) in occasion of my network with no expert users...(If there is a solution, I will combine an x64 app with an turn off aero in a single shortcut )
We have removed a computer from the domain because of some network issues.When we logged in to the computer as a local administrator we've noticed that the user folder of the domain user who was previously logged to that computer was almost empty(except for the appdata folder).When we joined the pc back in the domain the computer made a new profile.Unfortunaly the user did save some documents on his dekstop in the old profile.
I had users passing around a computer that ended up with a bunch of settings being screwed up which made me want to deny all regular domain users but not administrators. I did this as a local group policy on the computer under gpedit where i denied users and to my horrifying experience no users can log in, not even local admin.
I have a free domain from dyndns. I am going to run a small website so, I installed apache server for windows. I need to redirect my users from my main page (my domain) to another page in my web space.
i am looking for a way to create temporary profiles for people who log into our loaner computers on our domain. When i search on google all that comes up is how to fix the temp user error
I have an issue with Sharing a Folder on a Windows SBS 2011 Domain. On my Windows 7 Client Computer I want to Share one particular folder, but not with "Everybody". Instead I just want to share the Folder with one colleague Toward this end I enabled Sharing on the folder and gave Brendon permission to access the share.
1.) How can the Media Player pinned shortcut on the taskbar be removed for All Users?2.) In general, how can application shortcuts be pinned to the taskbar for All Users? reviewed the excellent REG files posted that would allow taskbar pinned applications to be added or removed for the current user or all users but those solutions seem to only apply to the win 7 OS system level application shortcuts
I'm trying to remove the option for user's to right click on programs and select 'run as administrator' i need to keep the right click menu but have the 'run as administrator' option either grayed out or removed.
A win7 os was loaded with a user created that has support priviledges and not ADMINISTRATOR rights,this has made it impossible 2 do any administrative functions on the system.I have tried to activate the administrator without success
I work in and oversee the computer network of a small architecture office. We only have 6 or 7 users right now, and about 12-14 active machines throughout the office. All machines connect through our office domain to our server box running Windows Server 2003 x86. Most production machines are now running Windows 7 x64, but there are a few XP x86 machines still left in the office. Everyone logs onto their machine using their username and password, which is set up in Active Directory Users and Computers on the server. Each username has a login script associated with it that maps various shared folders on the server as network drives on the workstations.
Right now, each user's workstation has that username set up as an Administrator account on that machine. I know that's not recommended, but it's been okay so far. However as time passes, I'm getting more and more concerned about network and computer security.
I'd like to know if there's a way to set up user accounts such that it won't ask for an Admin user name and password every time a program needs an update, but also doesn't allow them full access like Admins have, i.e. deleting software and such.
The issue is that I don't want to have to run around and enter an admin user name and password on the Windows 7 machines every time some software update appears or the user needs to install some software on a machine. We're a small office and don't rely on any actual IT department. I have many other responsibilities in the architecture field (working drawing production, project management, etc) and don't have time to always do that, especially when I'm out of the office on a jobsite, etc.
gpd is preventing me from doing most anything with my PC.Accidentally, II activated something as administrator and now I am limited as to what I can do I get windows saying blocked by group policy editor from performing this action. see administrator. I had admin privileges until reboot and now password has been changed,not by me.I am the only one with access to pc.
I added one user to Local Network Configuration Operators Group in Windows 7 Pro to change his laptop IP to connect to different VLANs at different locations, but still he doesn't have the privilege. He is also member of the Local Power Users Group
I have tried to enable the $ shares on a windows 7 64 bit machine in a workgroup.i have tried the regedit that is suggested on the internet and added the Qword without success. Has anyone successfully done it?
I recently locked down a PC's with LGP. It is heavily restricted for public use.One strange problem that has cropped up is the Flash player in Firefox.I didn't install the plug-in before I locked down the user account. Afterwards I realized I hadn�t installed it so I logged on to the Admin account and installed the plug. The player now works fine when logged in as Admin or as a User with full privileges but won�t play in my locked down user account, where I still get a message saying the plug-in is not installed.
I have a laptop that has been attached to a domain that is no longer available. It will not let me logon any other way but a non admin / non domain user account.
Admin password is lost. Can I use something like Nordahl to access that admin account? Domain or not?
I want to alter the attachment manager in Local Group Policy Editor, but when I open it up, I am constantly greeted with a warning message that says One or more ActiveX control could not be displayed because either: 1) Your current security settings prohibit running ActiveX controls on this page, or 2) You have blocked a published of one of the controls.The odd thing is I am not trying to access anything online, this is merely a Windows policy editor access from my machine. I am wanting to change the attachment settings to stop warning messages from appearing when certain filetypes are unzipped.
