K1000 Provisioning with local admin or domain admin ?
Hi,
I am having a bad time trying to understand what is going on with my new Kace.
Just trying to do some provisioning on Windows computers in my domain and when I use a credential with domain prefix, the installation failed due to "access is denied". I guess UAC is part of the answer like it is said in other subject.
But if I put instead the local admin for credential, it works just fine. Why is that ?
Fell free to ask for any details on my configuration.
I am having a bad time trying to understand what is going on with my new Kace.
Just trying to do some provisioning on Windows computers in my domain and when I use a credential with domain prefix, the installation failed due to "access is denied". I guess UAC is part of the answer like it is said in other subject.
But if I put instead the local admin for credential, it works just fine. Why is that ?
Fell free to ask for any details on my configuration.
1 Comment
[ + ] Show comment
-
what version of windows? - SMal.tmcc 8 years ago
-
Windows 7 - Horakiel 8 years ago
Answers (2)
Please log in to answer
Posted by:
SMal.tmcc
8 years ago
double check to make sure that user is a member of the local administrators group or a domain group that is. could be a gpo is not applying that makes the domain admins - local admins, that has happened here with Windows 10.
are you using this format for your credentials?
are you using this format for your credentials?
Comments:
-
Normaly when we create an admin for the domain, he is automaticaly considered as a local admin, I mean its also one of the purpose of the domain admin right ?
Yes I am using this format.
I tried : "tmccadmn\adminuser" and also just "adminuser" to be sure. both returns the same issue. - Horakiel 8 years ago
Posted by:
SMal.tmcc
8 years ago
say I have a user desktopmanager in the domain.
I check the local machine and this is the security applied by the domain GPO's
If desktopmanager is not a member of 1 of the 3 groups noted above he has no admin rights.
if he is a member of one these groups I can use tmccadmn\desktopmanager for the credentials username to login with as an admin via kace
I check the local machine and this is the security applied by the domain GPO's
If desktopmanager is not a member of 1 of the 3 groups noted above he has no admin rights.
if he is a member of one these groups I can use tmccadmn\desktopmanager for the credentials username to login with as an admin via kace
