RE: Enterprise admins security group missing

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



I would suggest that the groups *do* exist but are perhaps hidden.

Either logon as the Administrator in the root domain or as someone with
domain admins rights in the same domain. Then try to add an account into the
SA/EA groups.

Perhaps, the SA?EA groups are hidden from non-admins(?)

neil



"David Tilman" wrote:

> We need to move the Schema Master role from a DC that will be demoted, which
> requires a user to be a member of the enterprise admins or schema admins
> security group. Both of these security groups can't be found in the AD. We
> have just one domain and haven't made a change to the schema recently, so
> this went unnoticed. This might be related to creating a new domain and
> removing the old one about 10 months ago.
>
> What can we do to restore these groups without affecting other security
> groups or users, when they might have been removed several months ago? Is an
> authorative restore of the security groups the best approach?
>
.



Relevant Pages

  • Re: Schema Owner
    ... Admins group, added myself back to this group, and then I was able to seize ... the schema master with NTDSUTIL. ... I recreated the domain on another server ... I am a member of Enterprise Admins, Domain Admins, and Schema Admins ...
    (microsoft.public.windows.server.active_directory)
  • Re: Exchange 2k3, Again
    ... It looks from the log that your schema master isn't responding. ... account is a member of the Enterprise and Schema admins groups. ... I am trying to install Exchange Server 2003 on another win2k3 ... Error code 0XC0070424: ...
    (microsoft.public.exchange.setup)
  • Re: forestprep
    ... * This posting is provided "AS IS" with no warranties and confers no rights! ... failed saying I needed to upgrade the Schema to R2. ... After running adprep /forestprep I could craete the replication group on the ... Your account should be a Domain Admins group to achieve this. ...
    (microsoft.public.windows.server.active_directory)
  • Domain Global Groups in Workstation Local Admin Groups
    ... I want to create Global security groups, and populate the workstations local ... My problem is that I only want our functional software admins to have admin ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Cannot update Active Directory. Error code = 1355.
    ... Well, being "Domain Admins" is not enough, make sure you are in "Schema ... it looks like you have a DNS issue. ... * your server name (nslookup smsserver.mydom.intra) ...
    (microsoft.public.sms.admin)