What is special about the account "Administrator" in a domain except the groups it belongs to?

I can get some services (ipswtich.com-Imail mail services) to run correctly when startet under the "Administrator" account of our domain. They run on a domain controller. These services need access to login information because the ADS-accounts are used for login into the web mail interface. I created an account "WebmailUser" which is in every group the administrator is in (Administrators, Domain-Admins...). Still the authentification with ADS login credentials in the web interface works only if I use the "Administrator" account. What is wrong? I don't want to use the administrator.
Who is Participating?
JamesDSConnect With a Mentor Commented:
The administrator is not just a member of groups, it also has certain additional rights like "logon as a service" in your case these rights are conferred with Group Policies

Look in your Default Domain Controller group policy and your Default Domain Policy at the Windows Settings\Security Settings section for the rights you need to apply to your WebMailUser account.

I would start with "log on as a service" and "log on locally"


From the workstation point of view (windows help system) :
"The Administrator account is the one you use when you first set up a workstation or member server. You use this account before you create an account for yourself. The Administrator account is a member of the Administrators group on the workstation or member server.

The Administrator account can never be deleted, disabled, or removed from the Administrators local group, ensuring that you never lock yourself out of the computer by deleting or disabling all the administrative accounts. This feature sets the Administrator account apart from other members of the Administrators local group."

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.