Administrative Rights Lost on DC
From: Bobby (Bobby_at_discussions.microsoft.com)
Date: 09/29/04
- Next message: CasDeTroy: "RE: !!!! Cannot logon by administrator Urgent????"
- Previous message: Bill: "Domain unavailable after Remote Access role added and removed"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 29 Sep 2004 04:45:03 -0700
Good morning all,
While implementing security policies on a domain and the domain controller,
I mistakenly imported the member server policy into the domain controller
security policy. This mistake cost me a day or so, but I have mostly
recovered except for some nagging issues. I am no longer able to modify
security policies or Group Policy as my administrative rights to these
actions has been denied.
It is not only the built-in administrator, but all the administrative
accounts that were on the machine have suffered similar fates. Does anyone
know how I can regain permission to modify group policies? For a time, I was
able to modify policies, which is how I got the domain controller back to a
somewhat "normal" state, but I am stuck now.
One other example of a problem I am having is the TS logon as administrator.
The security policy shows that the "Deny Logon Interactively through
Terminal Services" right does not include the administrative accounts, and
the "Allow Logon Via Terminal Services" right is assigned to the
Administrators. Still, I get denied when I try to logon in this manner. I
have to use the local keyboard and monitor.
Any help is appreciated.
Bobby
- Next message: CasDeTroy: "RE: !!!! Cannot logon by administrator Urgent????"
- Previous message: Bill: "Domain unavailable after Remote Access role added and removed"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
