?
Solved

User Not Granted Rights in Active Directory

Posted on 2009-04-27
3
Medium Priority
?
197 Views
Last Modified: 2012-05-06
Experts,

I have a strange problem with Active Directory on a Windows Server 2003 domain. I have a new user I just added to the domain and have put them in the Administrators group. I have double checked it and the user is in there. They even used their credentials to add their new computer to the domain. However, the computer will not allow him to install or change anything as if he was just a regular user. I have tried gpupdate /force and rebooted several times. I am not sure what to try next. Any suggestions are appreciated.

Thank you!
0
Comment
Question by:conquerdev
  • 2
3 Comments
 
LVL 23

Accepted Solution

by:
Erik Bjers earned 2000 total points
ID: 24247220
Run gpresult on the computer that the user is logged into and make sure that the user is listed in the local administrators group.

Also make sure you don't have any group policies in place that restrict membership to the local administrators group.

eb
0
 
LVL 23

Expert Comment

by:Erik Bjers
ID: 24247225
As a side note when a user needs domain admin rights they should have two separate accounts.  One for normal day to day use (normal user) and their admin account.  This provides better security on your network.

eb
0
 

Author Closing Comment

by:conquerdev
ID: 31575254
ebjers,

I really appreciate it. I was in a hurry and forgot about the "Domain Admins" group. Thanks for pointing this out because I was stumped.
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the absence of a fully-fledged GPO Management product like AGPM, the script in this article will provide you with a simple way to watch the domain (or a select OU) for GPOs changes and automatically take backups when policies are added, removed o…
High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question