Re: Permissions on AD acct not being seen

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Chriss3 [MVP] (noSpamHere_at_chrisse.se)
Date: 01/11/05


Date: Tue, 11 Jan 2005 15:13:28 +0100

Hello Linda.
You can have a view at your administrators settings, and check if they are
applied.
If you are running Windows XP or Windows Server 2003, You can use rsop.msc
or the command line based tool gpresult to view the current configuration,
applied by a group policy from active directory that your administrator has
configured. Some tobuels may can be that the application not have necessary
rights to write to the file system or the registry as well.

-- 
Regards
Christoffer Andersson
Microsoft MVP - Directory Services
No email replies please - reply in the newsgroup
------------------------------------------------
http://www.chrisse.se - Active Directory Tips
<ferretwoman33@yahoo.com> skrev i meddelandet 
news:1105451358.800645.163970@f14g2000cwb.googlegroups.com...
> We just moved over to our company's Active Directory from NT4.  This
> move broke one of our software programs.  After making all the changes
> required to make the software program work again, the program is
> telling us we don't have specific rights that it needs to run: Act as
> part of the operating system, Increase quotas,  Replace a process level
> token, Log on as service.  These permissions have been set on local
> policy, and we have created an OU just for the server that needs these
> permissions, and according to my AD administrator, these have been set
> at the server OU level (the only level we have control of) for the user
> acct.  This acct is a member of the Administrators group at both the
> local and OU level.
>
> Now, not knowing much about Active Directory, I don't understand why my
> program is still saying it doesn't have the required permissions when
> my AD admin is saying he's set them.  The program is giving me the same
> message as it did before he set them.  Can anyone think of any reason
> why this user acct that is used to run the software program is not
> seeing the permissions that it was given at the OU level?
> Thanks!
>
> Linda
> 


Relevant Pages

  • Re: Problem with creating email-enabled objects and SMTP addresses
    ... > server, adding user to the administrators of exchange server helps, but is ... >> Create an Exchange e-mail address part). ... All this from Windows XP workstation using Active Directory ... >> But when I put user as a member of administrators group, THAT WORK, I have ...
    (microsoft.public.exchange.admin)
  • How do I stop users from accessing the global address list??
    ... I want to run a hosted Exchange 2003 server and I don't want users that I've ... added to the Active Directory to be able to get at the global address list ... I just want Administrators to be able to access it. ...
    (microsoft.public.exchange.admin)
  • RE: Access Denied when running RSoP
    ... The launch and activation security descriptor for the COM Server application ... It contains Access Control Entries with permissions that are ... which is a part of the McAfee Common ... > Administrators - Full Control - This namespace and subnamespaces ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows 2003 - User Logins vs Software
    ... > We have recently installed a Windows 2003 domain server. ... admin, open "Active Directory Users and Computers", locate the workstation ... "Administrators" group under "Local users and Groups". ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Rights in TS
    ... registry key that I needed to modify was an HKLM key. ... different subnet for VPN clients is intriguing. ... Administrators have complete and unrestricted access ... Regarding the TS server and AD link - thanks for your reply about ...
    (microsoft.public.windows.terminal_services)