How to give admin rights through a group.

Question

Hello. On the local computer in the Administrators group, there is a group AdminKYA

I want to give admin rights to the support group. I include users in the adminKYA group, but the user still does not have administrator rights and I have to manually include the user in the Administrators group. For example Kudritsky. Why doesn't this work through groups? The user is listed in the group adminKYA

Answer 1

Hello @Андрей Михалевский ,

Here is my suggest.

Test 1
You can try to add another user into group adminKYA and then check if the new user in group adminKYA has local administrator right on one machine.

Test 2
Please add group adminKYA to local Administrators group via Preference\Control Pannel Settings\Local Users and Groups GPO.

Then check if the user in group adminKYA has local administrator right on one machine.

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

Hi @Андрей Михалевский ,

after adding the user Kudritsky in the group AdminKYA the user should log-off and login again.

This way the new group membership of the user will be in his access token.

----------

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards
Andreas Baumgarten

Answer 3

The user is in the group. His membership has been renewed. He has been in this group for over a month.

Answer 4

Hello @Андрей Михалевский ,

Thank you for posting here.

Based on the description, I understand as below:

When the user Kudritsky is in group adminKYA and adminKYA is in the local Administrators group, the user Kudritsky has no admin rights, but when you add the user Kudritsky into local Administrators group manually, the user Kudritsky has admin rights, is it right?

If so, would you please confirm the following information:

1-Is this machine you mentioned in the workgroup or in the domain?
2-Is the user Kudritsky a local user on this machine? Or it is a domain user?
3-Is the group adminKYA a local group on this machine? Or it is a domain group?
4-Based on "Why doesn't this work through groups? ", how did you see it does not work through groups?

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 5

When the user Kudritsky is in group adminKYA and adminKYA is in the local Administrators group, the user Kudritsky has no admin rights, but when you add the user Kudritsky into local Administrators group manually, the user Kudritsky has admin rights, is it right?

Yes.

1-Is this machine you mentioned in the workgroup or in the domain? - domain
2-Is the user Kudritsky a local user on this machine? Or it is a domain user? - domain user
3-Is the group adminKYA a local group on this machine? Or it is a domain group? domain group
4-Based on "Why doesn't this work through groups? ", how did you see it does not work through groups? the credentials do not apply for any actions that require admin rights