RE: Enterprise Admins have no permissions in Tree Root.

From: Rob (Rob_at_discussions.microsoft.com)
Date: 01/24/05


Date: Mon, 24 Jan 2005 05:03:04 -0800

yeah let me clean that up a bit...

the test is really trying to use an enterprise user (from Domain A) across 2
domains (child/parent) but not to either of the DCs. going from a member
server on one domain to a workstation on another domain. and vice versa...

setup:
Domain A (parent)includes DC and 1 member server
Domain B (child)includes DC and 1 workstation

but even more basic.. when i log into the workstation using the parent
enterprise admin i cannot even get to the security permissions on a folder
(any folder). They are not active..

"Allen Firouz" wrote:

> Rob,
>
> You terminology is kinda all over the place :) Are you trying to access a
> member server on the child domain? or a PC joined to your child domain? Is
> the server joined to the domain? If so, then Domain and Enterprise Admins
> should have administrative rights on the server. Please provide more
> information.
>
> -Allen Firouz
>
> "Rob" wrote:
>
> > i believe that i found my answer.. the enterprise admins have not permissions
> > on member servers.. my impression was that it did.. any ways around this??
> >
> > "Rob" wrote:
> >
> > > All.
> > >
> > > I have setup 2 domains in a forest/tree root structure. I am testing with
> > > the Enterprise Admins and cannot get full administrative permissions to
> > > follow them inthe tree root.
> > >
> > > DC A is forest
> > > DC B is tree root
> > > workstation A is in DC B.
> > >
> > > When i log into workstation A as Enterprise admin i cannot do permissions as
> > > simple as file permissions. They are not active.
> > >
> > > What am I missing.
> > >
> > > Thanks in advance..
> > >
> > > r



Relevant Pages

  • Re: Basic Active Directory Questions
    ... Primary DC DNS service was disabled. ... Seondary DNS server has problem address with this DC ... Point your Member server and workstation to '10.81.20.19' as their prefered ...
    (microsoft.public.windows.server.active_directory)
  • Re: Basic Active Directory Questions
    ... Point your Member server and workstation to '10.81.20.19' as their prefered ... DNS server and try accessing the share. ... Utility on workstation kerbtray showed no ticket info. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Basic Active Directory Questions
    ... PASS - All the DNS entries for DC are registered on DNS server ... DNS server '10.251.7.14'. ... Utility on workstation kerbtray showed no ticket info. ... I attached member server to DC1 through changing the workgroup on MB1 ...
    (microsoft.public.windows.server.active_directory)
  • Re: hardening a windows server
    ... >it also depends if this will be an Enterprise CA ... >me a member server ... ... >I believe that it is equally possible to deploy secure ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Server wont share
    ... > windows server 2003 and I can't figure out how to do it. ... DCs do not have any "Local" accounts. ... 1st) Join the workstation to the domain (done via the workstation My ... to demote this domain controller to a member server. ...
    (microsoft.public.win2000.networking)