Re: Administrative user accounts no longer has admin privs?

From: Steven L Umbach (n9rouz_at_nscomcast.net)
Date: 11/26/03


Date: Wed, 26 Nov 2003 03:30:55 GMT

Possibly those accounts are also members of a group that has deny access somewhere to
registry/ntfs acls or those accounts have deny access to registry/ntfs acls. ---
Steve

"Michael Howard" <anonymous@discussions.microsoft.com> wrote in message
news:07ef01c3b3bb$80ed56c0$a301280a@phx.gbl...
> The accounts I use for administrative tasks has
> apparently lost its administrative status.
>
> When I attempt to install software on a domain account
> (including DC's) I'm told that the account does not have
> privileges and to log on with one which does.
>
> The account has not had group membership changed. It is
> a member of Domain Admins, and Domain Admins is a member
> of the local Administrators group (on machines other than
> DCs).
>
> Even if I explicity add the accounts to the
> Administrators group I'm met with the same message.
>
> This happens on two separate accounts that I keep for
> admin tasks--one simply a copy of the other (for testing
> purposes).
>
> If I create a new user, assign them to Domain Admins, all
> is fine.
>
> This happens on XP clients as well as 2k clients.



Relevant Pages

  • Re: Sub Domain Admin Accounts
    ... because it is a member of the Enterprise administrators universal group. ... Other members of the child domain admins group would not have this ability ... >> no technical reason why an admin accounts in one domain need to access ...
    (microsoft.public.windows.server.general)
  • Re: AD Delegation Fails - Permissions Disappear
    ... in turn a member of the Print Operators group. ... inheriting permissions?? ... ACL on all security principals (users, groups, and machine accounts) present ... AdminSDHolder Object Affects Delegation of Control for Past Administrator ...
    (microsoft.public.windows.server.active_directory)
  • Re: security INF files
    ... member of and remove it. ... Use of included script samples are subject ... >>That will remove all accounts from the power users group. ...
    (microsoft.public.win2000.security)
  • Re: Queries
    ... Member Of Domain Admins ... Accounts that are members of the Domain Admins Group ... Accounts that are members of the Domain Users Group ...
    (microsoft.public.windows.server.active_directory)
  • Question regarding New User Creation Script
    ... to manage both the NT4 domain and the AD Domain. ... use the VBScript I have created to create user accounts they can only ... create accounts on the NT4 domain and not the AD domain. ... the script directly on a server which is a member of the AD domain ...
    (microsoft.public.scripting.vbscript)