Domain Controller Local Admin Account

Now type the name of your.

Domain controller local admin account. You log on by using the local administrator account instead of the built in administrator account and then configure the server to be the first domain controller in a new domain or forest. Since it can t function in a local or non domain mode there s no need for local accounts. You create a local administrator account on a computer this is running windows server 2003 or later operating system. If you don t remember your computer name please click on the link how to log on to another domain on your screen and it will display your computer name.

You can run command net localgroup to display all groups and chose the one that s best suited for a service account s least privilege access. Unfortunately domain controllers don t have the local users and groups databases once they re promoted to a domain controller. Again just raw speculation. Local administrator may not be a good group to add users to on a domain controller however for other purposes like event log reader and the like this worked well.

Depending on what your needs are you might be able to add the user or service account into the domain administrators group within active directory. Because these rights are not necessarily guaranteed for domain users in a windows domain environment you are shown how to grant local administrative rights to domain users. The user account for the storage resource agent requires local administrative rights. In order to log on to a local account enter your computer s name.