Re: Administrator account does not have rights

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 06/08/04 

Date: Tue, 08 Jun 2004 18:13:55 GMT

I would say that could be a definite sign of a virus or hack. If you are talking
about an account that is a domain administrator, then check to see if the domain
admins group was removed from the local administrators group on the computer. I would
check membership of the local administrators group anyhow to make sure it looks right
and that the account you are trying is indeed in that group and not a regular account
renamed "administrator" which is commonly done. You could try to run secedit as
described in the link below to see if it fixes things, but you probably should
consider the server compromised unless you find a good explanation. If you have
auditing of logon events and account management enabled on servers, it can help
determine what happened in such situations assuming the security log had not been
erased which in itself would leave an event for. Also be sure to change all
administrator passwords on that server ASAP. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222

"Rebecca Owens" <anonymous@discussions.microsoft.com> wrote in message
news:19d1101c44d77$d809e2b0$a101280a@phx.gbl...
> Hey there;
>
> I needed to know if you guys have seen this problem
> before. I have a 2000 server and the administrator
> account has no rights to change anything. All of a sudden
> this started happening. Is there a virus or something
> that causes that? What can I do to fix it?
>
> Thanks for all your help
>
> Rebecca

Relevant Pages

  • Re: FIRED IT ADMIN HAS LOCKED US OUT OF SBS
    ... you have risen to an Administrator this would be a given. ... server and run all LOB apps on these. ... If there are no encrypted files, just reset the DSRM account ...
    (microsoft.public.windows.server.sbs)
  • Re: FIRED IT ADMIN HAS LOCKED US OUT OF SBS
    ... Teneo> Interesting post and Im now gonna be a party pooper... ... connections) before cutting power to the server and to the Internet ... If there are no encrypted files, just reset the DSRM account ... and try old domain Administrator account's passwords. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote desktop: cannot copy files why still not working
    ... I created a new user on the XP box, set as an administrator ... this new user account is local to the XP system, ... In my environment, when I do an RDP connection to a server, I first log ... member of the local administrators group on the server. ...
    (microsoft.public.windows.server.security)
  • Re: Remote desktop: cannot copy files why still not working
    ... this new user account is local to the XP system, and a member of the local administrator's group on that workstation. ... In my environment, when I do an RDP connection to a server, I first log on to the xp workstation using my regular, non-privileged domain account, run mstsc, and then logon to the server using a domain account that is a member of the local administrators group on the server. ... In addition, I frequently use runas to run privileged applications on the workstation using my "administrator" account, and have found that files cannot be copied between those applications and anything running under the credentials of my regular account - even though my administrator account actually does have full access to everything on the workstation - just not through my regular account's view of that workstation. ...
    (microsoft.public.windows.server.security)
  • Re: Shared Fax device not available anymore after reboot server!?!
    ... the error message one by one to the Newsgroup for accurate research. ... You can send fax by using Administrator account. ... after the reboot of the server no account is able to fax anaymore. ...
    (microsoft.public.windows.server.sbs)