Solved

Domain Admin Members have limited Domain admin permissions

Posted on 2006-11-20
4
215 Views
Last Modified: 2010-04-18
I recently inherited a network.  My account is a member of Domain Admins and Domain Admins are a member of the local administrator's group on each machine.  However, our permissions are limited.  For example, I tried to launch Device Manager as myself (a member of Domain Admins) on a local and was told I do not have the privilige.  I had to log in as the Domain Administrator Account.  There are three Group Policies on the network that I haven't been able to go through yet, but I was hoping you might point me in the right direction.
0
Comment
Question by:scubaed69
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 31

Expert Comment

by:Toni Uranjek
ID: 17981356
Use GPMC or gpresult to find out which policies are in effect. There might be domain wide policy which prohibits  access to Control Panel. If you have only three policies defined you won't have to much work to review settings.

You are looking for User Configuration policy in Control Panel.
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 500 total points
ID: 17982849
just move your user out of the range of any policy and try again, quick way to see if its a policy or not
0
 

Author Comment

by:scubaed69
ID: 17984447
I couldn't find the policy blocking me.  Everything I checked said not configured.  So, I created a new OU, blocked inheritance to it and placed the neccesary accounts in the OU. This seems to have solved the issue.
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 17984470
it was most probably the default domain policy that has some settings in it
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
Come and listen to Percona CEO Peter Zaitsev discuss what’s new in Percona open source software, including Percona Server for MySQL (https://www.percona.com/software/mysql-database/percona-server) and MongoDB (https://www.percona.com/software/mongo-…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question