troubleshooting Question

Secondary domain administrator account cannot mount User Profile Disks

Avatar of Paul Æ
Paul Æ asked on
Windows Server 2016Active Directory* vhdxWindows 10Azure
8 Comments1 Solution21 ViewsLast Modified:
Hi all, my question specifically is: Why can I not mount VHDX files using a secondary domain administrator account? The specifics are below.

Environment
(Server 1) Domain Controller - Server 2016
(Server 2) RDS 1 of 2 - Server 2016
(Server 3) RDS 2 of 2 - Server 2016
User Profile Disks are housed on Server 1

Problem​​​​​​​​
I am trying to lock down the built-in Domain Administrator account so my staff cannot use it, instead using their own Domain Admin accounts (ex. Admin1). When doing this, however, I now get Access Denied errors when attempting to mount VHDX files on Server 1.

The VHDX actually does mount, but I still get an Access Denied error from these extra domain administrator accounts when attempting to mount and then attempting to enter the virtual disk.

The VHDX files security includes the Domain Admins group w/ Full Control, which Admin1 is apart of. When mounted, the virtual disk has the security group Administrators listed as Full Control; again Admin1 is also apart of this group.

Domain Users have no problems using their VHDX files, but I just can't seem to figure out how to give the additional domain admin accounts access.

We had issues in the past trying to do Exchange CU's with auxiliary admin accounts and I was wondering if maybe that was the problem here.

I am not seeing anything in the Administration, Security, or Application logs related to the access denied dialog box.

---

Any help would be appreciated, I am on a solid 20 hours working on this. A reboot after work hours did not resolve the issue unfortunately.
ASKER CERTIFIED SOLUTION
Log in to continue reading
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform for $9.99/mo
View membership options
Unlock 1 Answer and 8 Comments.
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
The Value of Experts Exchange in My Daily IT Life

Experts Exchange (EE) has become my company's go-to resource to get answers. I've used EE to make decisions, solve problems and even save customers. OutagesIO has been a challenging project and... Keep reading >>

Mike

Owner of Outages.IO
Phoenix, Arizona, United States
Member Since 2016
Join a full scale community that combines the best parts of other tools into one platform.
Unlock 1 Answer and 8 Comments.
View membership options
“All of life is about relationships, and EE has made a virtual community a real community. It lifts everyone's boat.”
William Peck

Member since 2004