Re: Win 2008 - Error when setting up an authoritative time server

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Hello Chris,

Choose the "Run as administrator" option with a righclick. Even domain admins are not having full control by default.

When an administrator logs on to a computer running Windows Vista or Windows Server 2008, the user is assigned two separate access tokens. Access tokens, which contain a user's group membership and authorization and access control data, are used by Windows® to control what resources and tasks the user can access.

The only account that has the FULL control is the administrator account. All other admins are prompted with UAC. You have the following options:
- disable UAC - run all with the "Run as Administrator..." option. - check out and TEST the GPO, Computer configuration, windows settings, security settings, local policies, security options, "User account control: Behavior of the elevation prompt for administrators in Admin Approval Mode", choose "Elevate without prompting".


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


Hi there, I've followed the MS instructions for setting up one of our
Win2008 domain controllers (with the PDC emulator FSMO role) and I get
an "access denied" error. I then tried to do it via the registry and
was not allowed to modify or create a new registry key - with the same
error "access denied". All this time I was logged as a domain admin
with full rights. What am I doing wrong? Any insight would be
appreciated.

Thanks, Chris



.

Relevant Pages

  • Re: Default Users properties
    ... The administrator, domain admins, and enterprise admins have everything but ... full control, system has full control, authenticated users has read, ... everyone has change password, and if present the pre-2000 group has read. ...
    (microsoft.public.win2000.security)
  • Re: Parent Control Software
    ... I have heard that the new McAfee Security Suite has Parent Control. ... You can create a very STRONG and COMPLEX administrator password by ... With this account, a child can access anything you ... Probably the most important part is taking GOOD control of the Administrator ...
    (microsoft.public.security)
  • Re: Cant Create User Profiles?
    ... Ensure the "Profile Folder" has the following permissions set: ... Full Control - Administrator ... > | Windows 2000 Server with the latest service packs and patches. ...
    (microsoft.public.win2000.general)
  • Require users to press Ctrl+Alt+Delete Grayed Out
    ... Per the advice of Kelly of Kelly's Korner I ran RegEdit ... I then created a new DWORD value, "DisableCAD"; ... the check box in the user accounts control ... >>as Administrator (although my account, ...
    (microsoft.public.windowsxp.security_admin)
  • ActiveX controls are prohibited
    ... My security settings in IE are the default, ... double checked that the Administrator account is part of the Administrators ... Group, which according to the description, still has complete control over ... in the error page) and did what it said, which is to delete the 2 ActiveX ...
    (microsoft.public.win2000.windows_update)