Sign in
 
HomeWindows Server 2012Windows Server 2008 R2Windows Server 2003LibraryForums
Windows Server TechCenter >
> 
> 
Administrator Access - Not Working

Respondida Administrator Access - Not Working

  • Thursday, November 29, 2012 10:32 PM
     
     
    Sign In to Vote
    0

    I'm having a very strange issue since deploying Server 2012 for the first time within our environment. We have a large AD environment that pushes out a GPO to all servers adding an AD group admin access (adds group to 'Administrators' on the local server). This policy has been successfully pushed out to the 2012 server, but for some reason users within this group still do not have admin rights. Honestly, I'm sure there is a super simple fix, but I've run out of ideas. I have also manually added user accounts within the 'Administrators' group, but still no luck.

    Any ideas? Thanks in advance!

    Dean

     

All Replies

  • Friday, November 30, 2012 8:17 AM
    Moderator
     
     Answered
    Sign In to Vote
    0

    Hi,

    Would you please let us know how did you configure the Group Policy to add the users into Local Admins group?

    Based on the current situation, please refer to the following Microsoft TechNet articles for how to troubleshooting this issue:

    Troubleshooting Group Policy Problems

    http://technet.microsoft.com/en-us/library/cc787386(v=WS.10).aspx

    Configure a Local User Item

    http://technet.microsoft.com/en-us/library/cc771917.aspx

    Local Users and Groups Extension

    http://technet.microsoft.com/en-us/library/cc731972.aspx

    Regards,

    Arthur Li

    TechNet Community Support

     
  • Friday, November 30, 2012 12:29 PM
     
     
    Sign In to Vote
    0
    What do the security logs say from when they try and log in?
     
  • Friday, November 30, 2012 3:01 PM
     
     Answered
    Sign In to Vote
    0
    Hi Dean, I think I have a problem very similar to yours. I believed that in my case the problem was caused by not disabling UAC while the server was in standalone mode, before I joined it to the AD structure, but it seems there's something else causing this situation after I saw your post. I've tried several things (fidling with UAC, GPO) but so far no luck, the Domain Admins are severely restricted, not being able to execute simple operations, such as editing and saving scripts, deleting files, unable to change the Local Security Policy and unable to change COM+ attributes as well, things a Domain Admin would do without any difficulties. I hope someone knows how to fix this annoyance..... Regards, Jose Oliveira.