Solved

Domain Administrator account.  C:\> GPRESULT /R    we get ERROR: Access Denied.    ??

Posted on 2016-11-21
6
54 Views
Last Modified: 2016-11-22
We have a Win2008R2 server giving us a headache, just started the other day, after we ran a Windows Update.    Only One role on this server which is Remote Desktop Services.

We seem to now be a RESTRICTED user even though we are logging as the Domain Administrator.    

My 1st hint was when running C:\> GPRESULT /R    we get ERROR: Access Denied.  
The related rsop.mmc also fails also "Access Denied"
Other commands return "not enough space on the disk",
   such as trying to run  
C:\Windows\System32\wbem>mofcomp scersop.mof
Microsoft (R) MOF Compiler Version 6.3.9600.16384
Copyright (c) Microsoft Corp. 1997-2006. All rights reserved.
Parsing MOF file: scersop.mof
MOF file has been successfully parsed
Storing data in the repository...
An error occurred while opening the namespace for object 1 defined on lines 10 -  13:
Error Number: 0x80070070, Facility: Win32
Description: There is not enough space on the disk.
Compiler returned error 0x80070070

Open in new window


Lots of space 100+ GBs free on C:.   Somewhere the Computer is restricted.     I just can't figure how to narrow it down.  
All of the issues seem related.  I've seen on this for days,   I sure need some fresh ideas on how to fix.

Please share some clues !
0
Comment
Question by:JReam
6 Comments
 
LVL 6

Accepted Solution

by:
jmac44 earned 250 total points
ID: 41896784
I would start be uninstalling the update that caused the problem. Do yo know what it is and how to find it? If not do a system restore prior to the update.
0
 
LVL 23

Assisted Solution

by:masnrock
masnrock earned 200 total points
ID: 41896946
Was this machine a DC? If not, you may need to remove from domain and rejoin it.
0
 
LVL 53

Assisted Solution

by:McKnife
McKnife earned 50 total points
ID: 41897255
Be aware that with UAC on, a domain admin is a normal user until he elevates.
So right click cmd.exe and select "run as administrator" and retry the gpresult/rsop.msc commands.
0
Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

 
LVL 1

Author Comment

by:JReam
ID: 41897387
KB3159398 was the CULPRIT which was installed on the AD controllers early last week.    That KB totally whacked our production RDS servers and every test and temporary RDS VM we tried at hello to the domain.      Extra nasty because once the GPOs were applied it caused the target RDS Machines to be hosed badly and permanently even if we later disjoined the domain.   We still don't know exactly what broke within the RDS machines.    What a headache.

Our fix was to:  
1)  Uninstall KB3159398 from all AD controllers
2)  Restore all RDS servers from backup.  

That KB3159398 wasted many days for us.  This KB should be used with extreme caution.   The Web Link to the KB documents shows quite a bunch of  stuff that you can get burned on, just like we did.   Danger danger.
0
 
LVL 23

Expert Comment

by:masnrock
ID: 41897682
I think there's a lesson to be learned from this. Create a test environment to test out updates and changes before putting into production.
0
 
LVL 1

Author Closing Comment

by:JReam
ID: 41897735
Thanks folks
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RSOP Red "X" 7 29
Using an internal domain name that you do not own 6 44
vmdk greater than 2TB 2 26
MSDN Licensing query 5 46
You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now