?
Solved

Domain Admin Account not getting Domain Admin rights on 2008R2 Remote Desktop Server

Posted on 2014-02-04
6
Medium Priority
?
671 Views
Last Modified: 2014-03-05
I have two domain admin accounts that log into 3 remote desktop servers, on 2 of the servers they can see all printers that have a security setting to only allow users in a Printers_x group or Local domain admins.
On 1 of the remote desktop server, they can only see the printers if they are added directly to the printer.  I have tried even adding domain admins to the printer and they still cant see it.
I have checked, doman admins are in local admins group.

I ran a whoami /groups /fo list as the user and it shows they are in the local administrator and domain administrator, but the printers still do not show up.

If I add the domain admin account to the Printers_x group, the printers show up.

It's like the Remote Desktop Server is not "seeing" that the user is a domain admin.

I have checked Local Policies Security Settings and they are the same.
I also have UAC the same on both machines.
0
Comment
Question by:BFanguy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
6 Comments
 
LVL 37

Expert Comment

by:Mahesh
ID: 39833653
have you mapped printers through some script \ GP Preferences so that if user is member of particular group, then only printer will get mapped ?

How you are mapping printers ?

Mahesh
0
 

Author Comment

by:BFanguy
ID: 39834204
not mapping printers, no GP preferences.

as far as I know all 3 remote desktop servers are the same.
0
 
LVL 37

Expert Comment

by:Mahesh
ID: 39834894
When you take RDP of 3rd server have you selected Printers checkbox on show options\local resources page in RDP window.
0
Get free NFR key for Veeam Availability Suite 9.5

Veeam is happy to provide a free NFR license (1 year, 2 sockets) to all certified IT Pros. The license allows for the non-production use of Veeam Availability Suite v9.5 in your home lab, without any feature limitations. It works for both VMware and Hyper-V environments

 

Author Comment

by:BFanguy
ID: 39835484
The domain admin users are also in a group called printers_hma and when they sign on, the see all the printers for Hma, just not the rest of the locations.  If I add the user directly to the security on the group, the printer shows up.  (all of the printers have local administrator), it's like TS3 (remote desktop server 3) is not honoring the Domain Administrators in the Administrator group.
0
 

Accepted Solution

by:
BFanguy earned 0 total points
ID: 39895087
This seems to have fixed itself.  my network admin made a statement that if you viewed the printers from "Devices and Printers" they showed up, but if you viewed them from a shortcut I have on allusers desktop called "Printers" they did not show up.

I just tested and they are showing up in both....
0
 

Author Closing Comment

by:BFanguy
ID: 39905886
problem went away.
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

718 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question