?
Solved

Server 2008r2 Builtin Groups issue

Posted on 2013-11-19
4
Medium Priority
?
334 Views
Last Modified: 2013-11-25
Hi All,

We have a server 2008r2 box that has recently been promoted to a DC.  This is a small remote site and there is an IT gent who comes into that office X amount time a week, since this is such a small office this box is also running DNS, DHCP and is a file server too.

Strangely the consultant appears to have no rights to this machine or at least very little. His account is a member of the Builtin group server operators which should give sufficient rights to create shares etc but it does not, it does on another server 2008r2 Dc that we have in the organisation. The issues does not appear to be limited to the server operator group, being a member if the print operator group also does not give me him rights to add printers on the machine too.

Does anyone have any suggestions? Thanks for your help.
0
Comment
Question by:sarrol
  • 3
4 Comments
 
LVL 18

Expert Comment

by:x-men
ID: 39659708
since promoted do DC, the valid group would be the Active Directory ones, instead of the local ones.
0
 

Author Comment

by:sarrol
ID: 39659748
Thanks x-men, but these groups are Active Directory ones. They can be found in the Builtin container and provide administrative permissions to the DC's.

As i said above the group supplies the correct permissions on another server 2008r2 DC.
0
 

Accepted Solution

by:
sarrol earned 0 total points
ID: 39662824
Issue was to do with the UAC level.
0
 

Author Closing Comment

by:sarrol
ID: 39674091
There was no real help from community so continued to troubleshoot issue myself on my test server.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I’m willing to make a bet that your organization stores sensitive data in your Windows File Servers; files and folders that you really don’t want making it into the wrong hands.
Native ability to set a user account password via AD GPO was removed because the passwords can be easily decrypted by any authenticated user in the domain. Microsoft recommends LAPS as a replacement and I have written an article that does something …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
Suggested Courses

607 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question