Networks

Ask something
Discussion Locked

domain admin accessing domain controller

0 helpful
3 replies

by barryvg 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
A real issue with accessing a domain controller (Win2000) from an NT server (not domain controller). Access was ok prior to the W2k system becoming a DC. The NT user (member of all domain groups is able to access a W2k3 DC, but not the W2k0 DC. When trying, the notice says "You do not have appropriate rights for this server." Can't get into the W2k0 local users and groups add-in as Active Directory is controlling this. In AD, the user has all the respective rights. Can anyone provide any suggestions as to where to look? This is becoming quite frustrating.

3 replies

by cg it

Is this network running in mixed mode or native mode? Is the W2K DC running in mixed mode or native mode? If in Native Mode, an NT can not talk to W2K DC.

Another question is what account is being used? you say respective rights however a minimum the user needs to be a member of the domain admins group. If this is a multi domain, multi forest, then minimum is enterprise admin group. Further, domain controllers have security policies that can be set that are different than domain security policies.

by barryvg

Had another suggestion to check on mode. It is in Native and guess that means looking at another means. Guess good reason to take NT out of the picture completely. Thanks for your help, you get the points.

This discussion is closed to new replies.