Active Directory won't run - Access is denied error on dsa.msc

Posted on 2008-11-10
Last Modified: 2012-06-27
I have a Windows Server 2003 Standard running AD for my domain but all of a sudden when I try to open the AD console (either by the Active Directory Users and Computers shortcut or the actual C:\Windows\system32\dsa.msc) I get the following error:

Access is denied

I am logged on as the domain administrator account (administrator). If I right click and Run As>Current User and then uncheck Run this program with Restricted Access then it opens fine.
Anyone any ideas???
Question by:paidsergrey
    LVL 6

    Expert Comment

    please tell us what Antivirus are u running...
    LVL 1

    Accepted Solution

    It sounds like the extension .msc isn't associated with mmc.exe

    Try re-associateing them by doing the following:

    Navigate to a .msc file such as dsa.msc which should be located at "c:\windows\system32\dsa.msc"
    Right click and select properties of the .msc file and if you notice that its set to open with "Unknown application" change it  to open with Microsoft Management Console, by clicking  "Change..." (next to "Opens with"), then "Browse..." and navigate to "c:\windows\system32\mmc.exe". Click "Open", hit "OK", and then close the Properties dialog. After that, the .msc applications should work properly.


    Author Closing Comment

    Brilliant, never would have thought that was going to be the issue - reassociated the .msc file extension with mmc.exe and all now working. Thanks a lot for that help!!


    Expert Comment

    Thank you Million times (Iceknight:)
    You have saved me....
    It's a very good explanation.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    At some point in your work you may run into a need to globally assign a specific file type to open using a specific program. I recently was tasked with completing this objective. In my case it was setting the TSV file association to open with Excel.…
    The saying goes a bad carpenter blames his tools. In the Directory Services world a bad system administrator, well, even with the best tools they’re probably not going to become an all star.  However for the system admin who is willing to spend a li…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    9 Experts available now in Live!

    Get 1:1 Help Now