Solved

Domain Administrator being blocked on domain controller

Posted on 2008-10-24
2
523 Views
Last Modified: 2012-05-05
weird thing, logged in as domain administrator I cannot open administrative tools/Active Directory Users and computers.  I get a C:\windows\system32\dsa.msc, I get the same thing with Domain Security Policy, and a bunch other.  I've checked the permission on the file and i'm in there but no luck.  Any ideas???
0
Comment
Question by:ibtaya
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 7

Expert Comment

by:cmarandi
ID: 22800645
check your local policies... START / RUN / GPEDIT.MSC

Go to Windows Settings / security settings / local policies / user rights.

besides other settings, check the log on locally... anywhere there is administrator, make sure it's adminsitrator@domain.com or \\domain\administrator and not just administrator.



Also, in the DSA.MSC, right click the domain, and choose to delegate ... make sure the domain admin is listed in there.
0
 
LVL 2

Accepted Solution

by:
ibtaya earned 0 total points
ID: 22886261
tried that no luck.  It's everything in the c:\windows\system32 folder that this happening to.  I can add them through MMC but can't open them from the "normal" locations.  I've even tried opening MMC, adding the AD users and computers, deleting the dsa.msc from c:\windows\system32, then saving my open mmc as dsa.msc and it saves fine.  But when I go to open the newly saved dsa.msc, get the same error.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Master DC completely died 15 75
Can i use a GC as a DC? 7 75
Separate domains for Production and Development Servers? 4 17
domain controller shut down question 6 68
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question