Windows NT domain administration: from a Windows NT Workstation with local accounts in the SYCON domain, you want administrative rights on all Windows NT Advanced Servers in that domain with minimal effort. What is the best approach?

Difficulty: Medium

Correct Answer: Add your user account to the Domain Admins group on any Windows NT Advanced Server in the SYCON domain

Explanation:


Introduction / Context:
Centralized administration is a core advantage of Windows NT domains. Rather than touching every server, you can use domain groups to grant rights across the domain. Understanding the scope of the “Domain Admins” global group saves time and ensures consistent privilege assignment.


Given Data / Assumptions:

  • You are in the SYCON domain.
  • You seek admin rights on all Windows NT Advanced Servers (domain members).
  • Minimal administrative overhead is desired.


Concept / Approach:
Adding a domain user account to the Domain Admins group grants administrative privileges on all domain member servers/workstations by default policy, avoiding per-machine changes. Adding a local workstation account (non-domain) to Domain Admins is invalid; adding your account to each server’s local Administrators group works but is labor-intensive and error-prone.


Step-by-Step Solution:

Open User Manager for Domains on any Windows NT Advanced Server.Open the Domain Admins group and add your domain user account.Log off/on to refresh tokens; verify admin access across servers.


Verification / Alternative check:
Microsoft guidance on group scopes and default privileges confirms that Domain Admins confer administrative rights on domain members.


Why Other Options Are Wrong:

Local workstation account in Domain Admins: not a domain security principal; not valid.Per-machine additions: possible but not minimal administration.Per-server Administrators group: same problem—too manual.None of the above: incorrect because adding to Domain Admins is correct.


Common Pitfalls:
Confusing local vs. domain accounts; forgetting to re-authenticate to receive new group tokens.


Final Answer:
Add your user account to the Domain Admins group on any Windows NT Advanced Server in the SYCON domain.

More Questions from Windows NT

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion