Solved

Domain Admin Account not getting Domain Admin rights on 2008R2 Remote Desktop Server

Posted on 2014-02-04
6
667 Views
Last Modified: 2014-03-05
I have two domain admin accounts that log into 3 remote desktop servers, on 2 of the servers they can see all printers that have a security setting to only allow users in a Printers_x group or Local domain admins.
On 1 of the remote desktop server, they can only see the printers if they are added directly to the printer.  I have tried even adding domain admins to the printer and they still cant see it.
I have checked, doman admins are in local admins group.

I ran a whoami /groups /fo list as the user and it shows they are in the local administrator and domain administrator, but the printers still do not show up.

If I add the domain admin account to the Printers_x group, the printers show up.

It's like the Remote Desktop Server is not "seeing" that the user is a domain admin.

I have checked Local Policies Security Settings and they are the same.
I also have UAC the same on both machines.
0
Comment
Question by:BFanguy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 39833653
have you mapped printers through some script \ GP Preferences so that if user is member of particular group, then only printer will get mapped ?

How you are mapping printers ?

Mahesh
0
 

Author Comment

by:BFanguy
ID: 39834204
not mapping printers, no GP preferences.

as far as I know all 3 remote desktop servers are the same.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39834894
When you take RDP of 3rd server have you selected Printers checkbox on show options\local resources page in RDP window.
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 

Author Comment

by:BFanguy
ID: 39835484
The domain admin users are also in a group called printers_hma and when they sign on, the see all the printers for Hma, just not the rest of the locations.  If I add the user directly to the security on the group, the printer shows up.  (all of the printers have local administrator), it's like TS3 (remote desktop server 3) is not honoring the Domain Administrators in the Administrator group.
0
 

Accepted Solution

by:
BFanguy earned 0 total points
ID: 39895087
This seems to have fixed itself.  my network admin made a statement that if you viewed the printers from "Devices and Printers" they showed up, but if you viewed them from a shortcut I have on allusers desktop called "Printers" they did not show up.

I just tested and they are showing up in both....
0
 

Author Closing Comment

by:BFanguy
ID: 39905886
problem went away.
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question