Solved

Access denied to own account in Active Directory

Posted on 2012-04-05
14
283 Views
Last Modified: 2012-06-27
I am having a wierd issue.  Anytime I try to make any change to my account in AD I get access denied.  If I try to move the account to a different OU or change the security of it i get the same error.  Inssuffient access rights to perform the operation.  I am in the domain admins and enterprise admins group.  Is there a way I can reset the permissions on my account?
0
Comment
Question by:Serenea Carpenter
  • 8
  • 5
14 Comments
 
LVL 9

Expert Comment

by:Geodash
ID: 37813359
Are you doing it in ADUC? Try right clicking and running as admin when you launch ADUC instead of double clicking it.
0
 
LVL 4

Expert Comment

by:MaximumIQ
ID: 37813379
You can try Geodash's suggestion, then go to the security tab of your User Properties window, Click Advanced and you should see a Restore Defaults button. If you still get denied trying to do that, I'd recommend doing this from a Domain Controller
0
 

Author Comment

by:Serenea Carpenter
ID: 37813708
I tried changing this to default after starting ADUC as administrator which is our default admin user which is also part of the enterprise admins group and it still says access denied.  THis was done on a domain controller through RDP.
0
NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

 
LVL 9

Expert Comment

by:Geodash
ID: 37813714
Log on as a different admin via RDP to make the change on your own account.
0
 

Author Comment

by:Serenea Carpenter
ID: 37813727
I tried that as well.
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37813743
Can you connect to a different DC and try? Do you have more than 1 DC?
0
 

Author Comment

by:Serenea Carpenter
ID: 37813778
Same results on all of them.  Logged in as different enterprise admin other than myself.
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37813804
Run ACLDiag.exe to diagnose and check for discrepancies in the permissions of the objects in AD

See if there is something wrong with the object

http://technet.microsoft.com/en-us/library/cc755388.aspx
0
 
LVL 9

Expert Comment

by:Geodash
ID: 37813812
Login as a different admin > Reset the persmission on your account > Remove yourself as a domain admin save > re-add as a domain admin > test
0
 

Author Comment

by:Serenea Carpenter
ID: 37823112
when I try to remove myself from domain admins i get Inssufficient access rights to perform the operation.  I have tried this as myself and built in administrator user that is also an enterpise and domain admin.
0
 

Author Comment

by:Serenea Carpenter
ID: 37823201
Error: failed to write security information into the Active Directory .   Unable
 to fix delegation.

This is what i get when I run alcdiag /chkdeleg /fixdeleg against my account.  I am doing this logged into a domain controller as enterprise admin.
0
 

Author Comment

by:Serenea Carpenter
ID: 37823293
Schema Defaults Diagnosis
        Schema defaults: Partial

Also getting this when I run acldiag /schema
0
 

Accepted Solution

by:
Serenea Carpenter earned 0 total points
ID: 37856951
Fixed the problem.  We had quest change auditor installed on the domain controllers.  When we removed the program the issue went away.
0
 

Author Closing Comment

by:Serenea Carpenter
ID: 37877347
Fixed on my own.
0

Featured Post

Simplifying Server Workload Migrations

This use case outlines the migration challenges that organizations face and how the Acronis AnyData Engine supports physical-to-physical (P2P), physical-to-virtual (P2V), virtual to physical (V2P), and cross-virtual (V2V) migration scenarios to address these challenges.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Server 2003 x64 upgrade question 10 48
What is this Task? 4 130
Forcibly removing a 2003 server from the Domain 4 54
Unexpected Windows system folders on D drive 16 88
Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question