User Not Granted Rights in Active Directory

Posted on 2009-04-27
Last Modified: 2012-05-06

I have a strange problem with Active Directory on a Windows Server 2003 domain. I have a new user I just added to the domain and have put them in the Administrators group. I have double checked it and the user is in there. They even used their credentials to add their new computer to the domain. However, the computer will not allow him to install or change anything as if he was just a regular user. I have tried gpupdate /force and rebooted several times. I am not sure what to try next. Any suggestions are appreciated.

Thank you!
Question by:conquerdev
    LVL 23

    Accepted Solution

    Run gpresult on the computer that the user is logged into and make sure that the user is listed in the local administrators group.

    Also make sure you don't have any group policies in place that restrict membership to the local administrators group.

    LVL 23

    Expert Comment

    by:Erik Bjers
    As a side note when a user needs domain admin rights they should have two separate accounts.  One for normal day to day use (normal user) and their admin account.  This provides better security on your network.


    Author Closing Comment


    I really appreciate it. I was in a hurry and forgot about the "Domain Admins" group. Thanks for pointing this out because I was stumped.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How to improve team productivity

    Quip adds documents, spreadsheets, and tasklists to your Slack experience
    - Elevate ideas to Quip docs
    - Share Quip docs in Slack
    - Get notified of changes to your docs
    - Available on iOS/Android/Desktop/Web
    - Online/Offline

    Lets look at the default installation and configuration of FreeProxy 4.10 REQUIREMENTS 1. FreeProxy 4.10 Application - Can be downloaded here ( 2. Ensure that you disable the windows fi…
    Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now