?
Solved

permission problem in Active Directory

Posted on 2008-06-18
4
Medium Priority
?
238 Views
Last Modified: 2010-03-17
The problem that I have is the domain controllers OU is not showing when I login as a domain admin. If I run a search nothing is found but if viewed with advance features you can see the domain controllers OU and the Infrastructure icon but both are displayed as windows icon. The domain controllers OU is Unknown under type and the infrastructure is infrastructure Update
If I login in as a domain administrator everything is normal.
When looking at any built in group membership for all the administrators icons are greyed out.

We have 4 DCs, 2x2003 and 2x2003r2 in a fully 2003 environment.
All domain controllers accounts and administrators accounts are stored in the default Domain Controllers OU.
0
Comment
Question by:AndyinJapan
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 22

Accepted Solution

by:
mcsween earned 750 total points
ID: 21819135
run a DCDiag on each domain controller and post the output here (not all 4 if they are pretty much the same)
0
 
LVL 39

Assisted Solution

by:ChiefIT
ChiefIT earned 750 total points
ID: 21824709
You should first understand that the Domain controllers is not an Organizational Unit (OU). It is a Common Name folder (CN). Common Name folders are built into the system. I believe the Infrustructure folder is as well.

Group policy was not meant to be involked on a CN folder. Nor, was that CN folder meant to go to a subdirectory of another folder. It was meant to be in the root of the Domain Schema.

I don't know what we are going to have to do in order to fix your issue. Messing with these folders by deleting them or moving them should have given you an access denied. You might try dragging these two back into the domain root of ADUC.

But, I believe to fix these issue, you might have to use the NTDSutil.

0
 

Author Comment

by:AndyinJapan
ID: 21836165
Hi Guys,
First, many thanks for your help on this one but in end I sorrted it out.....I gave myself full permissions over the OU in question and alll returned to normal as well as the greyout user icons. Not sure what happened here but its ok now anyway!

0
 
LVL 39

Expert Comment

by:ChiefIT
ID: 21836175
Glad to here you got it fixed:

0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Here's a look at newsworthy articles and community happenings during the last month.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question