Solved

Domain Administrator being blocked on domain controller

Posted on 2008-10-24
2
517 Views
Last Modified: 2012-05-05
weird thing, logged in as domain administrator I cannot open administrative tools/Active Directory Users and computers.  I get a C:\windows\system32\dsa.msc, I get the same thing with Domain Security Policy, and a bunch other.  I've checked the permission on the file and i'm in there but no luck.  Any ideas???
0
Comment
Question by:ibtaya
2 Comments
 
LVL 7

Expert Comment

by:cmarandi
ID: 22800645
check your local policies... START / RUN / GPEDIT.MSC

Go to Windows Settings / security settings / local policies / user rights.

besides other settings, check the log on locally... anywhere there is administrator, make sure it's adminsitrator@domain.com or \\domain\administrator and not just administrator.



Also, in the DSA.MSC, right click the domain, and choose to delegate ... make sure the domain admin is listed in there.
0
 
LVL 2

Accepted Solution

by:
ibtaya earned 0 total points
ID: 22886261
tried that no luck.  It's everything in the c:\windows\system32 folder that this happening to.  I can add them through MMC but can't open them from the "normal" locations.  I've even tried opening MMC, adding the AD users and computers, deleting the dsa.msc from c:\windows\system32, then saving my open mmc as dsa.msc and it saves fine.  But when I go to open the newly saved dsa.msc, get the same error.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now