Hi, Yesterday we got one typical problem.The problem exactly what happend i don't know even if i logging into domain admin i am not able to do anything. like a normal user. It means that here there is no difference between Domain Administrator and Normal account. How it is possible even if i logging into domain user also not able doing anything. Please help me.

Is this on a server or workstation? Is this a new installed device, or has this issue suddenly appeared?

Hello, Check the accounts you are using and see the memberof tab and see which groups they belong to..Sometime membershiop might have been removed by mistakeIsaac Oben MCITP:EA, MCSE

This is Server.Not newly installed .This issue suddenly appeared.

Hi, I we open anything all settings are grayed out.

It means you don't have the permissions..how about try getting someone to add you to the domain admin groupsIsaac Oben MCITP:EA, MCSE

Hello, open AD UC, choose the user account you are using and post the groups listed in "member of". I don't know what you mean with "typical problem", if you work as domain administrator this can't be typical.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

In addition to what Meinolf wrote. Be sure to logon with domain\administrator... not some account you've given domain administrator rights to, but the actual administrator. Then, try it again. Just realized that this could also be caused by Delegated Control... If you're logging on with some account that has been made a domain administrator, then perhaps delegation of control has been set so that account can't do as much as before? Again, you can exclude this cause by using the domain\administrator account instead of some account which has been made domain administrator.

Make sure that your administrator is member of the folowing groups: -Administrators -Domain Admins -Domain Users -Enterprise Admins -Group Policy Creator Owners -Scheme Admins The members of these groups have the full administrative control on objects in your domain. If you are not member of them, check if there is an other administrator in your domain that will allow you to be a member of them. If there is no other administrator, the only one solution is to restore a performed backup of your domain controller. If you have no other administrator and you have no backups, you should re-create your domain because there is no other solutions. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Best regard.

I think a moderator needs to take a look at this user (as well as his 6 friends). There appears to be some behavior with this group in racking up points. If you have something postive to post in these threads, please do so. If you response is truly the best answer and is truly helpful, the community will let you know. Visit: anITKB.com, an IT Knowledge Base.

@[JM] If you mean proposing your own reaction as answer, then message received. Thanks.

What I meant was that the user, "Malek Ahmed" appears to be running a scam, trying to build up his point quickly. It appears (to me) that he has created several accounts, and posting his own questions/answering legitimate questions, using the various accounts by giving himself votes/marking answers, etc... Check his profile and other of his recent postings in various Forum Categories. Its pretty obvious. If he is interested in providing value to the MS Forum community, it should be done properly. Visit: anITKB.com, an IT Knowledge Base.

Hello S.Vijay, Have you tried other domain admins accounts? Please collect output of whoami /groups and paste it to the forum for further research. For more information about Whoami command, please refer to: http://technet.microsoft.com/en-us/library/cc771299(WS.10).aspx Brent Hu,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.