Windows 2008 : Unexpected Behavior for Local Administrative Rights

Posted on 2009-04-17
Last Modified: 2012-05-06
I have a brand new Windows 2008 Domain with a DC, and a 2008 member server with Exchange 2007.

Forest and Domain are Windows 2003 Compatible for now, as I want to add a 2003 DC later.

I am experiencing some very strange behavior....

I am logged onto the Windows 2008 Member Server as the Domain Administrator.  Behavior is normal.

I log onto the Windows 2008 Member as user who is a member of the Domain Administrators group.  Get tons of UAC errors and 'Access Denied' when attempting to do just about anything.  This should not be happenning.

To further add to the confusion - and I'm sure it is related - I have also tried adding other users to the Local Administrators of this Member Server - only to have the used disappear when I hit 'Apply' !!

I have just recently rebuilt this environment from scratch, thinking that this behavior was the result of a mistake I made earlier in the week... but it was not.

Both of these machines were built from the same Windows 2008 Template - i.e. a VMware Virtual Disk that I had built up, installed updates, ran SysPrep on, then cloned.  This is something I've done in Windows 2003 without issue.  

I don't want to get off track though.  What is wrong here?
Question by:trivalent
    1 Comment
    LVL 2

    Accepted Solution

    This is really not my area but have you tried to unmark the UAC control?

    Featured Post

    Do email signature updates give you a headache?

    Constantly trying to correctly format email signatures? Spending all of your time at every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

    Join & Write a Comment

    Are you having trouble running ADPREP on your current 32-bit Domain Controller? Have you ran ADPREP multiple times on your Domain but still get an error stating you have not prepared your Domain yet? Here is a change that gets even the most seaso…
    Here's a useful script that will automatically delete ALL user profiles that are on a Windows Server 2008/R2 computer.   WARNING! This is a dangerous operation, designed for use by an administrator who needs to do a complete purge; for instance a…
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now