Re: Renamed local admin not enough rights

"LordFox" <rick.harderwijk@xxxxxxxxx> wrote in message
news:1145360236.860263.191520@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
The issue occurs right after adding the machine to the domain. I am
aware of the fact that the SID for the admin account does not change.

The Domain Admins are member of the local administrators group. No
issues occur in communicating with the domain. We have experienced no
trouble with this on any other machine before.

Indeed, if one logs on as a domain admin, no issues occur. The local
machine (renamed) admin-account is also still a member of the
administrators group.

Which account has the problem? Local or the domain Administrator?

Above you indicate the domain admins have no trouble (which would
include THE domain Administrator).

The LOCAL Administrator account follows similar rules but isn't
really related to Active Directory (this newsgroup).

Unless someone has removed this group from Administrators OR
has otherwise altered permissions on files then this is still going
to work normally since it too has a well-known SID that doesn't
change through rename.

The only thing that happened to the machine after adding it to the
domain is that we moved the machine to an OU on which we have policy
settings for WSUS.

Possibly a difference but unlikely to affect local admin privileges.

More likely is some (weird) change to file permissions.

--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

Cheers

Rick



.

Relevant Pages

  • Odd behaviour with user accounts (accounts "hidden")
    ... installation), dad and kids. ... "Administrators" group. ... As soon as I remove "kids" from the administrators group the account ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Password Problem - Server
    ... We are not sure if this user in in the Domain Admins ... accounts or the Administrator account. ... password on the administrators account has been changed.or I would say ... Open the Local Policy editor and check the ...
    (microsoft.public.windows.server.sbs)
  • Re: Help with Guest account
    ... Are you sure you are using an administrator account and did you verify it ... You can also run the command net user ... it is a member of the administrators group under local group memberships. ... Local Group Memberships *Administrators *Network Configuration ...
    (microsoft.public.windowsxp.security_admin)
  • RE: software to control domain administrators
    ... "Does anyone know any software to control, audit, or restrict access or privileges to domain administrators." ... I will restate my mantra differently, If you can not trust someone to be in a position of complete un-adulterated control of your network, then they should not be in that position. ... >(assuming we are talking about NT/AD Domain Admins) ...
    (Security-Basics)
  • Re: Confused
    ... Administrators group so they are administrators of the child domain, ... By default the Domain Admins of a domain are member of the ...
    (microsoft.public.win2000.active_directory)