Solved

Cannot Install Programs as Domain Administrator

Posted on 2011-02-21
15
262 Views
Last Modified: 2012-05-11
We have given a user on a domain admin rights so a program could be installed. After, trying to install the program as the user with admin rights the program will not be install. When logging in under the administrator for the local machine program installs correctly.

The user with admin rights cannot install programs please help.
0
Comment
Question by:maximus7569
  • 8
  • 7
15 Comments
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945099
can you check the local machine admin group and verify that domain admin is a member ?
0
 

Author Comment

by:maximus7569
ID: 34945170

yes it is.   A little more info might help.  The server was currently upgraded to SBS2008 or actually replaced.  They were running a SBS2003 domain.  Looks like the profile could be corrupted.  Could that be the case?
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945207
what about if you give another user domain admin, and try logging onto that user on the workstation, if this works it points to a profile issue, if it fails it points to a machine issue.
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
ID: 34945212
you could also try re-joining the domain.
0
 

Author Comment

by:maximus7569
ID: 34945223
Yeah that is a good idea.  Let me try that and will let you know.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945229
try both the other user, and the rejoin.. both will assist in our diagnosis :)
0
 

Author Comment

by:maximus7569
ID: 34945483
Will do. I am waiting for the user to get done with some work and I will try.
0
 

Author Comment

by:maximus7569
ID: 34946317
Tried a different user and still get the same issue I also rejoined and still get the same issue
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34946338
and the membership of the local admin group on the machine ?

and do you have any group policies applied to the machine.
0
 

Author Comment

by:maximus7569
ID: 34946372
No it is not, when I try to add the  his account to the local admin group on his machine it will not allow me too, it will not take admin credentials to add it.   No group policies have been added besides default SBS GPO's
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34946390
just to confirm, the local admin group doesn't have Domain\domain admins ?

are there any local policies applied to the machine controlling membership of the local admin group ? gpedit.msc
0
 

Author Comment

by:maximus7569
ID: 34946574
It will not allow me to add the user to the local admin group because under locations it just shows his computer and not the domain
0
 

Author Comment

by:maximus7569
ID: 34946919
I also logged in using the admin account on the local machine and tried adding domain users to the administrator group and still having the same issue
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34954088
is it only a problem on this one machine ?

> It will not allow me to add the user to the local admin group because under locations it just shows his computer and not the domain

mmm - how much work is re-building his machine, there is a point when you have to weigh a reinstall v's further diagnosis...
0
 

Author Comment

by:maximus7569
ID: 34955460
I disjoined and rejoined him to the domain and it solved the issue.  I appreciate the help!  
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently I finished a vbscript that I thought I'd share.  It uses a text file with a list of server names to loop through and get various status reports, then writes them all into an Excel file.  Originally it was put together for our Altiris server…
Welcome back!  My apologies for taking so long to write part two of this series; it's been a long time coming!  As I promised in Part 1, this article will focus on how to locate those elusive AD properties that you are searching for.  Why is this us…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

828 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question