Solved

Cannot Install Programs as Domain Administrator

Posted on 2011-02-21
15
238 Views
Last Modified: 2012-05-11
We have given a user on a domain admin rights so a program could be installed. After, trying to install the program as the user with admin rights the program will not be install. When logging in under the administrator for the local machine program installs correctly.

The user with admin rights cannot install programs please help.
0
Comment
Question by:maximus7569
  • 8
  • 7
15 Comments
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945099
can you check the local machine admin group and verify that domain admin is a member ?
0
 

Author Comment

by:maximus7569
ID: 34945170

yes it is.   A little more info might help.  The server was currently upgraded to SBS2008 or actually replaced.  They were running a SBS2003 domain.  Looks like the profile could be corrupted.  Could that be the case?
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945207
what about if you give another user domain admin, and try logging onto that user on the workstation, if this works it points to a profile issue, if it fails it points to a machine issue.
0
 
LVL 20

Accepted Solution

by:
woolnoir earned 500 total points
ID: 34945212
you could also try re-joining the domain.
0
 

Author Comment

by:maximus7569
ID: 34945223
Yeah that is a good idea.  Let me try that and will let you know.
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34945229
try both the other user, and the rejoin.. both will assist in our diagnosis :)
0
 

Author Comment

by:maximus7569
ID: 34945483
Will do. I am waiting for the user to get done with some work and I will try.
0
Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

 

Author Comment

by:maximus7569
ID: 34946317
Tried a different user and still get the same issue I also rejoined and still get the same issue
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34946338
and the membership of the local admin group on the machine ?

and do you have any group policies applied to the machine.
0
 

Author Comment

by:maximus7569
ID: 34946372
No it is not, when I try to add the  his account to the local admin group on his machine it will not allow me too, it will not take admin credentials to add it.   No group policies have been added besides default SBS GPO's
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34946390
just to confirm, the local admin group doesn't have Domain\domain admins ?

are there any local policies applied to the machine controlling membership of the local admin group ? gpedit.msc
0
 

Author Comment

by:maximus7569
ID: 34946574
It will not allow me to add the user to the local admin group because under locations it just shows his computer and not the domain
0
 

Author Comment

by:maximus7569
ID: 34946919
I also logged in using the admin account on the local machine and tried adding domain users to the administrator group and still having the same issue
0
 
LVL 20

Expert Comment

by:woolnoir
ID: 34954088
is it only a problem on this one machine ?

> It will not allow me to add the user to the local admin group because under locations it just shows his computer and not the domain

mmm - how much work is re-building his machine, there is a point when you have to weigh a reinstall v's further diagnosis...
0
 

Author Comment

by:maximus7569
ID: 34955460
I disjoined and rejoined him to the domain and it solved the issue.  I appreciate the help!  
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Recently I finished a vbscript that I thought I'd share.  It uses a text file with a list of server names to loop through and get various status reports, then writes them all into an Excel file.  Originally it was put together for our Altiris server…
This is an addendum to the following article: Acitve Directory based Outlook Signature (http://www.experts-exchange.com/Programming/Languages/Visual_Basic/VB_Script/Q_24950055.html) The script is fine, and works in normal client-server domains…
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now