• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Win2003 General Network Password???


Overclocked Like A Mother
Hi Guys,

A client of mine has Win2003SBS, and approx 8 workstations in his office. Win2000Pro and WinXPPro as clients.

My question: even though each workstation has each their own username and password to logon to the machine, Can the SmallBusinessServer still issue each and every workstation one general Username/password that overrides the client side? One username/password that can get into each machine no matter what the user/pass is on the client end.

The reason asking is that NOD32 Enterprise Edition would of deployed a lot smoother from the server if we had better access to the workstations.

Thanks in advance,


Any account that is a member of the Domain Admin group can be used to log on to any workstation and have Administrator rights.

Is this what you are after?


Overclocked Like A Mother
Using the domain user/pass will get into all clients? Really, thanks,

I would like to "Gain control" of all workstations during deployment of apps, like the antivirus. Was going around to each workstation gathering their usernames and passwords.

Save your feet. Use Remote Desktop to connect to the machines. Also, Small Business Server can be configured to install any required software on all it's clients.


Bow Down to the King
Political User
As long as the desktops are joined to the domain then yes. The Administrator account is located in the Users OU.


Overclocked Like A Mother
Thanks a lot, Guys,

Thanks for the help. Will look for the OU next time I am in that office. Remote desktop, should of thought of that last night, too.



Woah.. I'm still here?
Staff member
Political User
If they are part of the domain, the domain\Domain Admins group is automatically added to the local administrator group when they join the domain.

If the user is setup as a local administrator, they can, technically, remove the domain admins group from the local administrator group in which case, your domain admin account would not have access to the machine.

You can setup "restricted groups" in your Group policy to force a domain group into a local group (MS Link on Restriced groups).

You could (of course) also deploy your software via GPO's as well.. or SMS or any other deployment software..


█▄█ ▀█▄ █
Political User
Just wanted to chime in a bit about a few things....

First of all, and this is only opinion and my preference, on my servers that run AV's and push applications/updates to clients, I don't use Domain Administrator accounts. I created a special Group that contains all service accounts that need to have just enough rights to do their job. Maybe I'm a bit ****, but I don't like having excessive rights for tasks that don't need them.

I pushed out NOD32 about two weeks ago and I love the customization you have and how you can build your own packages. I had a few weird errors at the first time I tried communicating with the clients, but nothing I wasn't able to resolve :)


Overclocked Like A Mother
Thanks Guys,

I am interested in how your setup goes about, KC. through a special group and all clients are in the workgroup?




█▄█ ▀█▄ █
Political User
Nothing to do with clients really, I just have a Group on the network called "Maintenance" (just my preference, really has no meaning), that has sufficient network priveleges to carry out specific actions.

I have a few user accounts in this group, the one related to NOD32 being called "avupdates". This way I don't need to use members of the Domain Admin or local Admin groups, which would give more access rights than needed IMO.

Group memberships and settings come down through the network.

Members online

No members online now.

Latest posts

Latest profile posts

Hello, is there anybody in there? Just nod if you can hear me ...
What a long strange trip it's been. =)

Forum statistics

Latest member