Creating a Workstation only Administrator

Last reviewed: March 25, 1997
Article ID: Q125782

The information in this article applies to:
  • Microsoft Windows NT operating system version 3.1
  • Microsoft Windows NT Advanced Server version 3.1
  • Microsoft Windows NT Workstation version 3.5
  • Microsoft Windows NT Server version 3.5
  • Microsoft Windows NT Workstation version 3.51
  • Microsoft Windows NT Server version 3.51
  • Microsoft Windows NT Server version 4.0
  • Microsoft Windows NT Workstation version 4.0 ---------------------------------------------------------------------

To add a pseudo-administrative account to a domain to allow a user to administer and maintain Windows NT workstations but not servers:

  1. On one of the servers in the domain:

    a. Start User Manager for Domains.

    b. Create a new global group (for example, WKSADMIN).

    c. Add the pseudo-administrator user to the group.

  2. On the all workstations in the domain:

    a. Start User Manager.

    b. Add the new global group to the workstation's local administrator

         group.
    

This gives the pseudo-administrator administrative rights on the workstations in the domain but not the servers.

Once you add the new global group to all workstation's local administrator group, you can add additional workstation administrators by adding them to the global group on the server.

If you want the pseudo-administrators to have limited administrative capabilities on the domain servers, add them to the Server Operators group on a server in the domain. This allows them to shut down the server, share and stop sharing directories, and backup and restore files. It does not allow them to change any user attributes, add drivers, or take ownership of files.


Additional query words: admin limited prodnt
Keywords : kbnetwork ntdomain nthowto ntsecurity NTSrvWkst
Version : 3.1 3.5 4.0
Platform : WinNT


THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: March 25, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.