Admin account does not have admin rights!

Server 2008 R2 (x64). Suddenly this DC has lost admin rights! The domain administrator we have used to login to this secondary DC does not have admin rights. When I drop to a command prompt and type in Net LocalGroup administrators I only see this user account listed as local admin rights. Yet if I try to do ANYTHING that requires admin rights I get an error dialog that says this operation requires elevated privileges!

I have tried logging in as both a local user and a domain user but I cannot get admin control to uninstall apps! What can I check to fix this problem??

July 8th, 2015 7:12pm

Hi

 Could you check the replication between DC's first..run "repadmin /replsum",and try another administrative account to logon.(member of Domain Admins,Enterprise Admins.)

 Also you could check on event log's there is an error log on this DC:

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2015 4:27am

Ok, I was in error. The server is NOT a DC. It's just a server. There are no other Admin accounts to try. We only have one domain admin account (we're a small office.)
July 9th, 2015 12:21pm

Seems like this member server lost trust relationship to domain,

- Rejoin this server to domain

or you can follow the steps on article;

http://blog.blksthl.com/2013/03/18/fix-the-trust-relationship-between-this-workstation-and-the-primary-domain-failed/

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2015 1:29pm

Isn't this a catch 22? How do I disjoin the server from the domain if I don't have an admin account??

July 9th, 2015 1:44pm

Hi ISD-PC-MAN,

In my expression, the domain administrator lose the admin permission on a domain member server, the local administrators group only contains local administor account on the member server.

I assume you got a credential of the domain administrator account, since you used the account to login to server, in this case, please make sure the server has joined the domain, and logon the member server as local administrator account, and add the "Domain Admins" group to the local administrators group, you need to provide a credential of the domain account to complete this operation.

If there is anything else regarding this issue, please feel free to post back.

Best Regards,

Anna Wang

Free Windows Admin Tool Kit Click here and download it now
July 9th, 2015 10:18pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics