Solved

Domain Admin Members have limited Domain admin permissions

Posted on 2006-11-20
4
211 Views
Last Modified: 2010-04-18
I recently inherited a network.  My account is a member of Domain Admins and Domain Admins are a member of the local administrator's group on each machine.  However, our permissions are limited.  For example, I tried to launch Device Manager as myself (a member of Domain Admins) on a local and was told I do not have the privilige.  I had to log in as the Domain Administrator Account.  There are three Group Policies on the network that I haven't been able to go through yet, but I was hoping you might point me in the right direction.
0
Comment
Question by:scubaed69
  • 2
4 Comments
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 17981356
Use GPMC or gpresult to find out which policies are in effect. There might be domain wide policy which prohibits  access to Control Panel. If you have only three policies defined you won't have to much work to review settings.

You are looking for User Configuration policy in Control Panel.
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17982849
just move your user out of the range of any policy and try again, quick way to see if its a policy or not
0
 

Author Comment

by:scubaed69
ID: 17984447
I couldn't find the policy blocking me.  Everything I checked said not configured.  So, I created a new OU, blocked inheritance to it and placed the neccesary accounts in the OU. This seems to have solved the issue.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17984470
it was most probably the default domain policy that has some settings in it
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now