Possible to make a domain user a local admin on a server?

monkthecat 41 Reputation points
2020-10-14T23:10:47.81+00:00

We have an AD domain user (not a domain admin), and we want to give that user admin rights to one server that is joined to our domain. We don't want to give the user domain admin rights, or admin rights to other servers.

I know how to make a domain user an admin on a NON-SERVER machine joined to the domain, but have not ever tried to do this on a server.

Anyone know if this can be done?

Thank you!

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,422 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dave Patrick 426.4K Reputation points MVP
    2020-10-14T23:17:31.89+00:00

    Make sure the From this location is correct. Type in domain\user then Check Names

    32317-image.png

    --please don't forget to Accept as answer if the reply is helpful--

    1 person found this answer helpful.
    0 comments No comments

7 additional answers

Sort by: Most helpful
  1. Dave Patrick 426.4K Reputation points MVP
    2020-10-14T23:12:50.107+00:00

    Yes, you can simply add the user's domain account to the local administrators group on that server.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  2. monkthecat 41 Reputation points
    2020-10-14T23:14:09.773+00:00

    How do I do that? I tried opening the local users and groups admin panel on the server, but that does not show domain users.

    0 comments No comments

  3. monkthecat 41 Reputation points
    2020-10-14T23:25:30.993+00:00

    Wow, thank you, super helpful. If I want the user to be able to log into the server via remote desktop (the server is a terminal server), would the root active directory domain (mycompany.com) be the correct "From this location" value?

    0 comments No comments

  4. Dave Patrick 426.4K Reputation points MVP
    2020-10-14T23:27:32.927+00:00

    Should be fine as long as the Check Names was successful.

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments