Solved

AD Permissions problem with new server

Posted on 2010-09-12
7
319 Views
Last Modified: 2012-05-10
Newly joined Windows Server 2008 R2 computer to a newly set up domain -- when logged in as a new (domain) user (with domain admin permissions) -- can't run anything.   You get this message:

"Windows cannot access the specified device, path or file.  You may not have appropriate permissions to access the item."

If you log in as a local machine user - everything runs.

I've never seen this problem before.
0
Comment
Question by:paulflint
7 Comments
 
LVL 10

Expert Comment

by:Bawer
ID: 33657734
try giving the domain user permission on C drive and other drives, also note that you may not have setup a roaming profile and the profile is not loading....
0
 

Author Comment

by:paulflint
ID: 33658401
Yes but this doesn't make sense - you don't HAVE to use roaming profiles with domain workstations and as for drive permissions -- howcome I don't have this with another 100 PC domain I can add brand new computers to with no problem .. !!

Paul
0
 
LVL 3

Expert Comment

by:petelettin
ID: 33658513
is the time in sync

Pete :-)
0
PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

 

Author Comment

by:paulflint
ID: 33658609
petelettin -- yep, time is all synced !

paul

The problem seems to be with the active directory and group policy -- it just isn't being picked up by the newly joined server.
0
 
LVL 53

Accepted Solution

by:
Will Szymkowski earned 250 total points
ID: 33659087
I would recommend using rsop.msc on the problematic machine. This will allow you to troubleshoot the GPO issue on this machine. You can also use gpresult /v. This will also give you detailed information, to see what is exactly being applied to the machine.

Another thing you can do is check the event viewer as this will also help...
0
 
LVL 5

Assisted Solution

by:MisterTwelve
MisterTwelve earned 250 total points
ID: 33662120
HI.
I try this
1. disjoint machine from domain
2. reboot Machine
3. Join Machine to domain again and reboot again.
I think this resolve the problem
0
 

Author Closing Comment

by:paulflint
ID: 33773898
Problem lay with VM images -- needed to run sysprep WITH "generalize" as security tokens were conflicting and AD just didn't like the imposter machines (vm's).  Sysprep with generalize .. THEn join domains, etc. - all good.   Thanks all.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
This article shows the method of using the Resultant Set of Policy Tool to locate Group Policy that applies a particular setting.
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question