control userpasswords2 Windows 2008 hangs on adding user

Experts,

I'm in some dire need for suggestions on this issue I'm having. Background, I have 4 AD sites with 5 domain controllers (2003/2008/2008/2008R2/2008R2). I am trying to add a local administrator to the DC at each particular site (onsite IT guy) by using "control userpasswords2", then adding them to the BUILTIN administrators group. Here is the issue, on ALL of the Windows 2008/2008 R2 servers the prompt hangs after entering the group to which the new user should be added. The Windows 2003 server seems just fine. It seems that it has to do with the AD that is causing the issue, 2 of these servers are literally brand new/fresh install of 2008.

Event log gives no real information beyond application hang on netplwiz.exe.

Any ideas?
Darren KattanIT ConsultantAsked:
Who is Participating?
 
hutnorConnect With a Mentor Commented:
If you would like him to use RDP. You will need to change the local GP to allow his user account to log on using rdp.

0
 
hutnorCommented:
Have you tried adding the users & putting them in the admin group with a mmc snapin for the local machine?

0
 
Darren KattanIT ConsultantAuthor Commented:
It doesn't look like I can add the "Local Users and Groups" MMC for the local computer since it is a domain controller.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
hutnorCommented:
What do you want the IT person doing at each location? Just manage the users & group at that location?

You can give a user access to an OU in AD & let them manage that.

Right click OU > Delegate control > follow the wizard & select permission as needed.
0
 
Ingram2Commented:
The built in administrator group in AD is the only local admin for the DC.
0
 
Darren KattanIT ConsultantAuthor Commented:
I have done the delegated control, unfortunately the admin tools for R2 are not compatible on his workstation, therefore I wanted to allow him to RDP into ONLY that server. Does that still apply if I wanted to add him to Remote Desktop Users? The wizard will still hang.
0
 
hutnorCommented:
get the tools that do work for his desktop & the server.

0
 
Darren KattanIT ConsultantAuthor Commented:
While this works, its not the answer I wanted to hear...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.