Re: Administrator can't change security

If you mean that the user is logging onto the domain instead of local
computer you will need to add the user's "domain" account to the local
administrators group on the member server. It would not matter what password
is used as it is group membership that determines who is a local
administrator. You can use the command net localgroup administrators to see
what users/groups are in the local administrators group. If you change a
user's group membership make sure that the user logs of and logs on again to
update his security token with the change in group membership. Also if there
are DNS problems in the domain you will experience unexpected results when
domain users logon to member servers. The support tools dcdiag [domain
controllers only] and netdiag can help troubleshoot such along with checking
the logs via Event Viewer for errors/warnings such as userenv that can
indicate problems finding or contacting a domain controller. --- Steve

http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B291382 --- AD
DNS FAQ


<addoty@xxxxxxxxx> wrote in message
news:1144792264.914244.91680@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I have two Windows Server 2003 R2 servers setup. One is the domain
controller. Both administrator accounts have the same password. On my
server that is not the domain controller, when I join the domain, the
administrator account cannot change any of the security settings for
any of the folders.

This happens if I set the administrator's login domain to the domain
controller or to the local computer. When I remove the second server
from the domain and return it to a workgroup, the administrator account
can make changes to the security settings.

This second server was upgraded from a Windows Server 2000 by inserting
the 2003 R2 CD. Why can I not make changes to any of the folder
security settings after the computer joins the domain?

Any help would be greatly appreciated.
AD



.

Relevant Pages

  • Re: FIRED IT ADMIN HAS LOCKED US OUT OF SBS
    ... you have risen to an Administrator this would be a given. ... server and run all LOB apps on these. ... If there are no encrypted files, just reset the DSRM account ...
    (microsoft.public.windows.server.sbs)
  • Re: FIRED IT ADMIN HAS LOCKED US OUT OF SBS
    ... Teneo> Interesting post and Im now gonna be a party pooper... ... connections) before cutting power to the server and to the Internet ... If there are no encrypted files, just reset the DSRM account ... and try old domain Administrator account's passwords. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote desktop: cannot copy files why still not working
    ... I created a new user on the XP box, set as an administrator ... this new user account is local to the XP system, ... In my environment, when I do an RDP connection to a server, I first log ... member of the local administrators group on the server. ...
    (microsoft.public.windows.server.security)
  • Re: Remote desktop: cannot copy files why still not working
    ... this new user account is local to the XP system, and a member of the local administrator's group on that workstation. ... In my environment, when I do an RDP connection to a server, I first log on to the xp workstation using my regular, non-privileged domain account, run mstsc, and then logon to the server using a domain account that is a member of the local administrators group on the server. ... In addition, I frequently use runas to run privileged applications on the workstation using my "administrator" account, and have found that files cannot be copied between those applications and anything running under the credentials of my regular account - even though my administrator account actually does have full access to everything on the workstation - just not through my regular account's view of that workstation. ...
    (microsoft.public.windows.server.security)
  • Re: Shared Fax device not available anymore after reboot server!?!
    ... the error message one by one to the Newsgroup for accurate research. ... You can send fax by using Administrator account. ... after the reboot of the server no account is able to fax anaymore. ...
    (microsoft.public.windows.server.sbs)