Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Domain Administrator being blocked on domain controller

Posted on 2008-10-24
2
Medium Priority
?
531 Views
Last Modified: 2012-05-05
weird thing, logged in as domain administrator I cannot open administrative tools/Active Directory Users and computers.  I get a C:\windows\system32\dsa.msc, I get the same thing with Domain Security Policy, and a bunch other.  I've checked the permission on the file and i'm in there but no luck.  Any ideas???
0
Comment
Question by:ibtaya
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Expert Comment

by:cmarandi
ID: 22800645
check your local policies... START / RUN / GPEDIT.MSC

Go to Windows Settings / security settings / local policies / user rights.

besides other settings, check the log on locally... anywhere there is administrator, make sure it's adminsitrator@domain.com or \\domain\administrator and not just administrator.



Also, in the DSA.MSC, right click the domain, and choose to delegate ... make sure the domain admin is listed in there.
0
 
LVL 2

Accepted Solution

by:
ibtaya earned 0 total points
ID: 22886261
tried that no luck.  It's everything in the c:\windows\system32 folder that this happening to.  I can add them through MMC but can't open them from the "normal" locations.  I've even tried opening MMC, adding the AD users and computers, deleting the dsa.msc from c:\windows\system32, then saving my open mmc as dsa.msc and it saves fine.  But when I go to open the newly saved dsa.msc, get the same error.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Always backup Domain, SYSVOL etc.using processes according to Microsoft Best Practices. This is meant as a disaster recovery process for small environments that did not implement backup processes and did not run a secondary domain controller that ne…
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

688 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question