Solved

Domain Admin Account not getting Domain Admin rights on 2008R2 Remote Desktop Server

Posted on 2014-02-04
6
658 Views
Last Modified: 2014-03-05
I have two domain admin accounts that log into 3 remote desktop servers, on 2 of the servers they can see all printers that have a security setting to only allow users in a Printers_x group or Local domain admins.
On 1 of the remote desktop server, they can only see the printers if they are added directly to the printer.  I have tried even adding domain admins to the printer and they still cant see it.
I have checked, doman admins are in local admins group.

I ran a whoami /groups /fo list as the user and it shows they are in the local administrator and domain administrator, but the printers still do not show up.

If I add the domain admin account to the Printers_x group, the printers show up.

It's like the Remote Desktop Server is not "seeing" that the user is a domain admin.

I have checked Local Policies Security Settings and they are the same.
I also have UAC the same on both machines.
0
Comment
Question by:BFanguy
  • 4
  • 2
6 Comments
 
LVL 35

Expert Comment

by:Mahesh
ID: 39833653
have you mapped printers through some script \ GP Preferences so that if user is member of particular group, then only printer will get mapped ?

How you are mapping printers ?

Mahesh
0
 

Author Comment

by:BFanguy
ID: 39834204
not mapping printers, no GP preferences.

as far as I know all 3 remote desktop servers are the same.
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39834894
When you take RDP of 3rd server have you selected Printers checkbox on show options\local resources page in RDP window.
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 

Author Comment

by:BFanguy
ID: 39835484
The domain admin users are also in a group called printers_hma and when they sign on, the see all the printers for Hma, just not the rest of the locations.  If I add the user directly to the security on the group, the printer shows up.  (all of the printers have local administrator), it's like TS3 (remote desktop server 3) is not honoring the Domain Administrators in the Administrator group.
0
 

Accepted Solution

by:
BFanguy earned 0 total points
ID: 39895087
This seems to have fixed itself.  my network admin made a statement that if you viewed the printers from "Devices and Printers" they showed up, but if you viewed them from a shortcut I have on allusers desktop called "Printers" they did not show up.

I just tested and they are showing up in both....
0
 

Author Closing Comment

by:BFanguy
ID: 39905886
problem went away.
0

Featured Post

Do email signature updates give you a headache?

Do you feel like you are constantly making changes to email signatures? Are the images not formatting how you want them to? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today.

Join & Write a Comment

Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

24 Experts available now in Live!

Get 1:1 Help Now