Hello!

A Windows 2000 Server as a PDC with Active Directory installed.

Logged in to the PDC as a domain admin I cannot access Domain Security
Policy. I get Access Denied.

Also, if I log on to a Windows XP Pro workstation as the same domain
admin, some things I cannot do (like change the system time) even
though DOMAIN\Domain Admins is in the local Administrators group.

Any idea why?

Thanks!

Re: Multiple Access Denied by Meinolf

Meinolf
Thu Mar 27 11:17:06 PDT 2008

Hello stevekokx@gmail.com,

Is this the only DC? Did you change something in the network/server configuration?
Check the event viewer for errors and post them here.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hello!
>
> A Windows 2000 Server as a PDC with Active Directory installed.
>
> Logged in to the PDC as a domain admin I cannot access Domain Security
> Policy. I get Access Denied.
>
> Also, if I log on to a Windows XP Pro workstation as the same domain
> admin, some things I cannot do (like change the system time) even
> though DOMAIN\Domain Admins is in the local Administrators group.
>
> Any idea why?
>
> Thanks!
>



Re: Multiple Access Denied by stevekokx

stevekokx
Thu Mar 27 11:50:20 PDT 2008

Yes, this is the only DC.

I have not changed the configuration since the initial installtion.

I have quite a few Netlogon errors in the system portion of the event
viewer relating to DNS.

Any ideas?

On Mar 27, 1:17 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
> Hello stevek...@gmail.com,
>
> Is this the only DC? Did you change something in the network/server configuration?
> Check the event viewer for errors and post them here.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > Hello!
>
> > A Windows 2000 Server as a PDC with Active Directory installed.
>
> > Logged in to the PDC as a domain admin I cannot access Domain Security
> > Policy. I get Access Denied.
>
> > Also, if I log on to a Windows XP Pro workstation as the same domain
> > admin, some things I cannot do (like change the system time) even
> > though DOMAIN\Domain Admins is in the local Administrators group.
>
> > Any idea why?
>
> > Thanks!


Re: Multiple Access Denied by stevekokx

stevekokx
Thu Mar 27 11:54:51 PDT 2008

For example:

Event Type: Error
Event Source: NETLOGON
Event Category: None
Event ID: 5774
Date: 27/03/2008
Time: 2:50:53 PM
User: N/A
Computer: PDC02
Description:
Registration of the DNS record '_kpasswd._udp.DOMAIN.COM. 600 IN SRV 0
100 464 pdc02.DOMAIN.COM.' failed with the following error:
DNS operation refused.
Data:
0000: 2d 23 00 00 -#..


On Mar 27, 1:50 pm, stevek...@gmail.com wrote:
> Yes, this is the only DC.
>
> I have not changed the configuration since the initial installtion.
>
> I have quite a few Netlogon errors in the system portion of the event
> viewer relating to DNS.
>
> Any ideas?
>
> On Mar 27, 1:17 pm, Meinolf Weber <meiweb(nospam)@gmx.de> wrote:
>
> > Hello stevek...@gmail.com,
>
> > Is this the only DC? Did you change something in the network/server configuration?
> > Check the event viewer for errors and post them here.
>
> > Best regards
>
> > Meinolf Weber
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> > ** Please do NOT email, only reply to Newsgroups
> > ** HELP us help YOU!!!http://www.blakjak.demon.co.uk/mul_crss.htm
>
> > > Hello!
>
> > > A Windows 2000 Server as a PDC with Active Directory installed.
>
> > > Logged in to the PDC as a domain admin I cannot access Domain Security
> > > Policy. I get Access Denied.
>
> > > Also, if I log on to a Windows XP Pro workstation as the same domain
> > > admin, some things I cannot do (like change the system time) even
> > > though DOMAIN\Domain Admins is in the local Administrators group.
>
> > > Any idea why?
>
> > > Thanks!