At IU, in Windows, how do I log into my workstation with administrative rights using my ADS domain account?
Note: The instructions below assume that you have created an ADS domain account for your Windows 7, Vista, or XP Professional computer at Indiana University. For more, see Configuring your Windows 7, Vista, or XP Professional computer to connect to IU's ADS domain
At IU, the University Information Security Office (UISO) strongly recommends against running your Windows computer while logged in as an administrator. Instead, you should normally run your Windows computer as a member of the Users Group, not as an administrator or a member of the Power Users Group; see In Windows, why should I avoid running my computer as an administrator? For tasks requiring administrative access, you can gain it quickly using the Windows Secondary Logon service; see What is the principle of least privilege?
If for some reason you need to make your ADS domain account an administrator on your local computer:
- Log in as an administrator or as a user in the local
Administrators group. From the
Startmenu, select eitherControl Panel, orSettingsand thenControl Panel.Note: If this doesn't match what you see, refer to About navigation settings in Windows.
- In Windows 7 and Vista, open
User Accounts, and then selectManage User Accountsand clickAdd. In XP, openUser Accountsand then clickAdd.
- To locate the account, click
Browse, and double-click the account when you find it. If you know the account you want to add, enter the username, and enterADSas the domain.
- In Windows 7 and Vista, choose
Administrator. In XP, you will have the choice of grantingStandard,Restricted, andOtherpermissions. SelectOther, and then selectAdministratorfrom the drop-down list.
- Click
FinishorOK. ADS accounts added in this manner will appear in the list of user accounts. Users in the list of user accounts will be able to log into your computer using their IU ADS username and password.
Last modified on October 24, 2011.







