August 30, 2008 12:14am pdt

Member Login

Hall of Fame

Yearly

1KCTS 68,218
2johnb6767 33,841
3oBdA 31,605
4Shift-3 25,400
5Chris-Dent 21,945
6rindi 21,480
7SysExpert 21,400
8RubenvdL... 18,720
9leew 16,370
10and235... 15,522
11jkr 14,750
12war1 14,600
13briancassin 14,500
14slam69 14,060
15matrixnz 13,825
16tigermatt 13,500
17toniur 10,950
18tboy6423 10,830
19Netman66 10,703
20ryansoto 9,950
211stITMAN 9,800
22mpfister 9,625
23TheCaped... 9,200
24merowinger 9,018
25martin_b... 9,000

	[x] Attachment Details

Local Admin rights restrictions on win2Kserver after demoting primary domain controller

Zone: Windows 2000 Operating System

Tags: domain, local, admin, controller, rights

We have an older server that was the domain controller (and DNS server) for a domain we no longer use. We want to upgrade this server from Win2k to Windows Server 2003 OS and use it as a backup domain controller for our new domain (already rolled out and running on a Windows 2003 Server DC).

Before upgrading, I ran DCPROMO to demote the win2K server, thereby deleting the old domain that we no longer use. Then I joined the demoted server to the new domain. The problem I'm having is that I'm not able to access everything when logging on to the new domain with any account that should have administrative rights. Even when I log on locally to the system with the Administrator account that was set up during the demotion process, I continually get the following message:

"This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator."

This message pops up during startup (so startup programs like McAfee, NovaBackup, and SQL Service Mgr do not start up), and I also get the message when trying to access Computer Management, and Services, from the administrative tools window.

The only way I am able to get the startup programs to run is to log on to the old, non-existent domain with that domain's admin account. With this logon, I still can't access computer Management or Services, unless I use the "Login as" feature and enter the local admin account logon (the same one that does not allow me access to these same resources if I logon to the computer with it!)

I have added the new domain's "Domain Amins" group to the local computer's Administrators group, but this had no effect. I ahve tried adding a new local user with admin rights, but it does not allow me to do this no materr how I am logged on.

Can someone help me figure out what is going on? It seems as though there are restrictions in place that are left over from the deleted domain, but I'm really not sure what to do next.

Start your free trial to view this solution

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

9.0

Question Stats

Zone: OS

Question Asked By: bjordon35

Solution Provided By: SysExpert

Participating Experts: 1

Solution Grade: B

Translate:

Loading Advertisement...

20080723-EE-VQP-34