Unable to delete or change user

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

When I attempt to remove or chance a specific user in AD I get an error that
AD cannot perform this action on a built-in account.

The user account in question was created by the original sysadmin, and the
built in administrator was disabled.

I am able to edit any other user without issue.

Thank you in advance for any thoughts or suggestions.

Bon
 
Bon said:
When I attempt to remove or chance a specific user in AD I get an error that
AD cannot perform this action on a built-in account.

The user account in question was created by the original sysadmin, and the
built in administrator was disabled.

I am able to edit any other user without issue.

Thank you in advance for any thoughts or suggestions.

Bon
Click to expand...

I suspect that the admin account was not disabled but was
renamed to the problem account. This would explain why
you cannot delete it.
 
Thanks for the reply!

I do see the disabled administrator account and the account I am trying to
delete, so I dont think that is the issue. But it does act like that is the
issue!

And what seems really weird to me, this user is a member of the
'Administrator' group, not Domain Admins. I think of that group as local to
a specific server vs Domain Admins that are admns across the domain (all
servers).

Can a single user be 'Owner' of the Active Directory? If so, how would that
be done? If I know how it was done I can probably undo it.

Thanks

Bon
 
The original "Administrator" account cannot be disabled.
If you can see a disabled "Administrator" account then it
follows that it is not the original "Administrator" account.

You can probably solve all your problems by doing this:
- Rename the current "Administrator" account to something else.
- Rename the problem account to "Administrator" (which is
what it was before someone started playing with it).
- Leave the default account names as they are, unless you
have a good reason for renaming them.
 
I will try your suggestion - Thanks!

Bon

Pegasus (MVP) said:
The original "Administrator" account cannot be disabled.
If you can see a disabled "Administrator" account then it
follows that it is not the original "Administrator" account.

You can probably solve all your problems by doing this:
- Rename the current "Administrator" account to something else.
- Rename the problem account to "Administrator" (which is
what it was before someone started playing with it).
- Leave the default account names as they are, unless you
have a good reason for renaming them.
Click to expand...
 
Back
Top