Access denied in Users and Computers

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

ckuderna_at_hotmail.com
Date: 12/14/04


Date: 14 Dec 2004 07:51:04 -0800

Hi,

i'm having a strange problem in my Windows Server 2003 AD:
- a W2K3 member server with the Admin Tools installed
- a user with "account operator" membership starts AD Users and
Computers
- uses "FIND" to locate a user account
- double clicks it
- "Access denied" on several tabs (Dial-in, member of, ...)

When the same user doesnt't use "FIND" but opens an OU and then
double-clicks the same user object everything works fine.

What's so different about the FIND function?

BTW:
- for a domain admin the problem doesn't exist
- I've applied the hotfix from KB883480 which solved another problem
with "FIND", but unfortunately not this one
- if the "account administrator" user works directly on the DC, the
problem doesn't show up either.

Please help me! :-)



Relevant Pages

  • Re: 4 forests-domains, roaming clients, no trusts, not Internet-Ba
    ... "Windows Server 2003 and Cross Forest Site Communications ... Communications across forests work in Configuration Manager 2007 if the ... Account appears to be for Client to Server communication. ...
    (microsoft.public.sms.setup)
  • RE: Adding AD Account to NT Global
    ... the Windows Server 2003 domain. ... Since Windows NT domain doesn't have child domain, ... during the migration of the user account passwords ... The password migration solution in ADMT was designed to provide a secure ...
    (microsoft.public.windows.server.migration)
  • Re: PwdLastSet
    ... AD Password expiration is handled in a very simple way and done when a user attempts to log on (or their account is otherwise trying to auth). ... Now I simply compare pwdLastSet against that value and anything less than it is expired. ... Directory: Windows Server 2003 ...
    (microsoft.public.win2000.active_directory)
  • Re: PwdLastSet
    ... user attempts to log on (or their account is otherwise trying to auth). ... it is the attribute called maxPwdAge. ... it is expired. ... Directory: Windows Server 2003 ...
    (microsoft.public.win2000.active_directory)
  • Re: Error when creating a new Web Service
    ... it from windows principle user ... Windows Server 2003 with the DOT.NET 1.1 framework. ... I have checked the permissions of the ASP.NEt account and it has the ...
    (microsoft.public.dotnet.framework.aspnet)