Re: Domain Administrator have lost all rights

From: Fabrussio (Fabrussio_at_discussions.microsoft.com)
Date: 11/06/04

  • Next message: Fabrussio: "Re: Domain Administrator have lost all rights" 
    Date: Sat, 6 Nov 2004 12:34:04 -0800

    thanks, so do I do this on the DC itself?
    I originally followed tip on http://www.jsiinc.com/SUBK/tip5300/rh5319.htm
    which says to add the GPO on a member server\computer with adminpak and
    browse for
    the local administrators group.
    Why will putting the domain administrator in a restricted local admistrator
    group give back domain rights?

    i am getting confused....

    "Andrew Mitchell" wrote:

    > =?Utf-8?B?RmFicnVzc2lv?= <Fabrussio@discussions.microsoft.com> said
    >
    > > Thanks but I have deleted all GPO's and restricted groups and restarted
    > > the server but the Domain Admin access is still restricted.
    > > eg. I can't access any remote workstation c$ drive, I can't look at
    > > files that have administrator Full control permissions, I can't access
    > > any http://localhost web sites from the server.
    > >
    > > How can I get back control???
    > >
    >
    > As Paul has already said, you need to recreate the restricted group GPO and
    > make sure you add the Domain Admins group.
    >
    > --
    > Andy.
    >

  • Next message: Fabrussio: "Re: Domain Administrator have lost all rights"

    Relevant Pages

    • Re: Applications/programs that require admin rights
      ... Updates to Restricted Groups ("Member of") behavior of user-defined local ... Systems Administrator ... you need to be Domain Admin to install software on a ... or use the runas command to install the app on ...
      (microsoft.public.windows.server.active_directory)
    • Re: Security Treats
      ... imagine that a malicious user wants to gain domain admin access. ... the administrator unwittingly gives away ... If you have group policy, ... Make sure your workstation accounts reside in an OU (rather than the default ...
      (microsoft.public.win2000.security)
    • Re: Applications/programs that require admin rights
      ... Systems Administrator ... the user in which I want to grant premissions to install the application. ... you need to be Domain Admin to install software on a ... I then try to install the program using that account ...
      (microsoft.public.windows.server.active_directory)
    • Re: The following updates were not installed
      ... >> The user rights that are required by Update.exe ... >>> Administrator of this local machine. ... > and not the 'domain-level settings'? ... you would have to log on as a Domain Admin in order to do that (again, ...
      (microsoft.public.windowsupdate)
    • Re: Restricted group implementation
      ... Unfortunately restricted groups policies are usefull for setting the same ... because your trying to set Restricted Groups policy per computer. ... But with the first option UserA, B and C will be administrator on all ...
      (microsoft.public.windows.group_policy)