A Domain Admin user doesn't have effective Administrative rights on a Domain Computer

Posted by rwetzeler on Server Fault See other posts from Server Fault or by rwetzeler
Published on 2010-05-19T18:22:16Z Indexed on 2010/05/19 18:32 UTC
Read the original article Hit count: 540

Filed under:

active-directory

|

windows-domain

|

domain-controller

|

domain

I am a developer who is setting up a virtual domain environment of testing purposes and am having trouble with the setup.

I have created a new DC on a new Forest... call it dev.contoso.com. I have setup a virtual internal network for all machines that are going to be apart of this virtual test environment and have given each machine a static IP address in the 192.169.150.0 subnet. I have added machine1.dev.contoso.com to the domain dev.contoso.com. I have also provisioned a user account (adminuser) in the domain and made that user a member of Domain Admins group.

Upon logging into machine1 using my newly created Domain Admin account, I cannot access/run any files on machine1. When I go into the advanced permissions for the c:\ folder and goto properties -> Security Tab -> Advanced -> Effective Permissions and search for the dev\adminuser (mentioned above), I get an error saying:

Windows can't calculate the effective permissions for admin user

What do I need to do to get Administrative rights on Machine1? I am using Server 2008 R2 for both the AD controller and machine1.

© Server Fault or respective owner

Related posts about active-directory

Can't join OS X Mavericks to AD Domain

as seen on Server Fault - Search for 'Server Fault'
I'm attempting to join an OS X Mavericks (10.9) client to a Windows Server 2008 Active Directory domain, however the bind fails with this error in the OS X client's system.log: Oct 24 15:03:15 host.domain.com com.apple.preferences.users.remoteservice[5547]: -[ODCAddServerSheetController handleOtherActionError:… >>> More
Retrieve user details from Active Directory using SID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her SID. I don't want to rely on other attributes, since I am trying to detect changes to these. Example: I get a message about a change to user record containing: Message: User Account Changed: Target Account Name: test12 Target… >>> More
Retrieve user details from Active Directory using GUID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Retrieve user details from Active Directory using GUID [closed]

as seen on Super User - Search for 'Super User'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Office365 DirSync Active Directory Integration

as seen on Server Fault - Search for 'Server Fault'
I am preparing to deploy Office365 for my organization. We have an on premise Active Directory Domain Controller (Windows Server 2012 R2). We would like to leverage our Active Directory for: automatic user provisioning in Office365, and password synchronization, using the DirSync tool. Our Active… >>> More

Related posts about windows-domain

Cancel Windows Domain Membership durin Suse installation

as seen on Super User - Search for 'Super User'
Hi, I am installing SUSE 11.2, and went with the default options, now it reached the point of "Windows Domain Membership". At job I do not remember the right names, so I tried some but I get an error message which says "cannot use the group "WORKGROUP" for Linux authentication", etc. So I would… >>> More
Cancel Windows Domain Membership durin Suse installation

as seen on Server Fault - Search for 'Server Fault'
0 vote down star Hi, I am installing SUSE 11.2, and went with the default options, now it reached the point of "Windows Domain Membership". At job I do not remember the right names, so I tried some but I get an error message which says "cannot use the group "WORKGROUP" for Linux authentication"… >>> More
Windows Domain Controller: Create a test environment from a production environment

as seen on Server Fault - Search for 'Server Fault'
I need to create a working test environment of a domain we have. I need to have all the data from the production environment in the test environment. What is the best way to go about doing this? Here are some ideas I have but I am not sure if there is a better/recommended way of doing this. Use… >>> More
Why is the DNS on my Windows Server 2012 not authoritative according to dig?

as seen on Server Fault - Search for 'Server Fault'
This is me trying to understand something rather than a real problem. I have a new Windows Server 2012 Essentials. That server provides, DNS, DHCP etc. Lets say my Windows domain is my-windows-domain and the server's host name is my-server. The domain's DNS zone is my-windows-domain.local. The server's… >>> More
Granting rights to Windows domain Users in Ubuntu?

as seen on Stack Overflow - Search for 'Stack Overflow'
I've connected an Ubuntu 9.10 server to my Windows domain with Likewise Open. I am able to log into the server with my domain account (as DOMAIN\user), but my administrative rights don't carry over. How can I grant admin rights to domain user accounts? >>> More