Privilege elevation not sticking

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Elevating Users privileges to Domain Admin for software maintenance is not
sticking. Server WIN2K DC, AD WIN2k\XP workstations all around.
Workstations are logging against the DC (checked by forcing password change)
but no Admin privileges.

Any ideas appreciated
 
Exactly what is not sticking? What is the name of the setting and where did
you configure it? If you are talking about Windows Installer it only works
for .msi packages. Also read the description of the setting. Some of the
Windows Installer settings require that they be enabled in both computer and
user configuration and the user and computer must be within the scope of
influence of the GPO. -- Steve
 
In AD Users & Computers on the DC I make a User a member of Domain Admins.
When I log on to the Users workstation as said User I should have full Domain
Admin rights (alway have had) This is not happening now.
 
If you do not have administrator control on that domain computer, verify
that the domain admins group is in the local administrators group on that
computer. Net localgroup administrators would show that information. The
other thing to check is that the computer you are logging onto has proper
network connectivity and working computer account in the domain. Look in
Event Viewer of that domain computer for any pertinent errors and run the
support tool netdiag on it to see if it reports any errors/warnings/failed
tests for dns, dclist, kerberos, or secure channel. If problems are reported
check the dns configuration of that computer to make sure it uses domain
controllers ONLY as it's preferred dns server as shown via Ipconfig
all. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;321708 -- netdiag
and how to install it
 
Back
Top