-1

I created a domain with windows server 2012.

I logged in with an user account.

And with default, this account cant access to Remote Desktop setting, LAN setting, ... and any system settings.

I don't know how to allow an specify setting, this case, I want to allow this user can modify Remote Desktop setting, and LAN setting.

Tks all.

Hưng Híp
  • 101
  • 1
  • 6

2 Answers2

0

Go to your Domain Controller. Open

Active Directory Users and Computers

. Select your user -> Properties -> tab Member Of -> Add -> Type in Enterprise Admins -> Check Names -> OK |OK

Federal Reserve
  • 121
  • 4
  • If the user has the right to edit the Domain Admins group, and he was not a member of it (or Enterprise Admins) - this is a PROBLEM. – Slipeer Nov 16 '16 at 06:37
  • But in case I just want this user just can modify 1 setting as Remote Desktop setting. How to do that ? Thank you. – Hưng Híp Nov 16 '16 at 06:42
  • Ya, I just want to specify setting, not all setting like Enterprise Admins – Hưng Híp Nov 16 '16 at 06:44
  • I would just add the user account to the Domain Admins group, seeing as OP does not have an AD forest. – John K. N. Nov 16 '16 at 10:31
0

When you configure a server a domain controller role, you had to do it as a user with administrative rights. This user should now be a member of the Domain Admins group and can modify Remote Desktop setting, LAN setting and many others. Automatically!

UPD. Policy "Prohibit access to properties of a LAN connection" described in technet. It has no relation to the delegation of the right to configure the network.

Slipeer
  • 3,295
  • 2
  • 21
  • 33
  • It's not my case, I dont want to new Admin account, I just want an normal user just can modify the Remote Desktop setting, but I dont know how to do this, maybe in User Configuration in GPO. – Hưng Híp Nov 16 '16 at 06:40
  • In order to get the rights to a domain or a domain controller (which is equivalent) - requires an account with domain administrator privileges (or enterprise administrator). No another way. – Slipeer Nov 16 '16 at 06:44
  • I think it's the "Prohibit access to properties of a LAN connection" GPO, but it cant apply. I dont know why. – Hưng Híp Nov 16 '16 at 06:48
  • If you are logged on a domain controller under the ordinary user - dismiss the domain administrator, he does not deserve his position. – Slipeer Nov 16 '16 at 06:49
  • What about admin agree ordinary user cant modify 1 setting in his computer ? – Hưng Híp Nov 16 '16 at 06:50
  • In this case, I have concerns about his mental abilities. Especially if we talk about the network domain controller settings. – Slipeer Nov 16 '16 at 06:52
  • So ADDS have nothing to do this case ? so what "Prohibit access to properties of a LAN connection" GPO can do ? – Hưng Híp Nov 16 '16 at 06:53
  • No way - ADDS designed not idiots. – Slipeer Nov 16 '16 at 06:58
  • So can you explain what "Prohibit access to properties of a LAN connection" GPO can do. Thank you – Hưng Híp Nov 16 '16 at 07:05
  • This policy supersedes policies that remove or disable parts of the Local Area Connection Properties dialog box, such as those that hide tabs, remove the check boxes for enabling or disabling components, or disable the Properties button for components that a connection uses. If you enable this policy, the system ignores the policies that disable parts of the Local Area Connection Properties dialog box. – Slipeer Nov 16 '16 at 07:07
  • Can you have any reference about this ? I think this is so difficult to understand – Hưng Híp Nov 16 '16 at 07:08