Why would my main domain controller and admin account lose the authority to perform installs (pushes) on the other sub domain controllers?
Printable View
Why would my main domain controller and admin account lose the authority to perform installs (pushes) on the other sub domain controllers?
Someone as removed the Domain Admin group from the local admin group on the other controllers.
MLF
Interesting, I can't add anyone from another domain as member to the domain admins group that is not on that domain.
I think the domain controller Administrator has to be a member of the Domain Admin Group...has it been removed??
Also...what changed :)
someone tweaking the network security...any policy changes recently??
MLF
The only thing I can think of is the change of the admin password.
Have you restarted all the sub controllers...
You have to get the new policy on the machines....your gonna have to reset on...I think this is what you need to do
http://support.microsoft.com/kb/322672/en-us
MLF
I don't think that is it.
Have you restarted all the machines since the change....
sorry...wrong article
http://support.microsoft.com/kb/325850/en-us
MLF
yes, I restarted all the domain controllers and attempted the process in the article and no go. None of my domains will accept the main domains admin account.
doesnt make sense...
Are you using AD or trusts
What OS (OSes)...obviously windows server...what versions?
MLF
Windows 2003 (AD), but checked the trusts just incase.
As its been said before, make sure your administrator account is a member of the Domain Admin group.
You say you have a PDC, then other member servers under that PDC, or you have multiple sub domains off of that PDC?
I belive theres also an enterprise adming group, or maybe thats just W2k3 Enterprise, but I'd add the admin account to that as well.