I have Windows 2008 server r2 standard. It seems my enterprise and domain admins don't have all the rights the local admin has. In IE 8 the domain admin has a lot of buttons grayed out, like security. Is this a problem with my server or meant to be this way? Can I change it....in GP or registry...is there a reason I wouldn't want to....or do you think this is some time of kerberos problem?thanksMike

Hello,Are you logged in tot he local workstation as a domain admin, that is using an account that is a member of the domain admins? You may need to add your domain admins as part of the local admin group..The easiest way to this might be through restrictive grouphttp://www.isaacoben.com/2009/10/03/how-to-control-memberships-for-local-computers-builtin-groups/Isaac Oben MCITP:EA, MCSE

I am logged into a windows 2008 r2 server with a domain admin account. That account is in the server's Administrators group. I have a windows 2003 AD. I have this same setup on a test network, but all the tabs available to the local admin are available to the domain admin too. On my production network...it didn't work out that way. I have the same GPOs in the test and production domains. So I am a bit stumped.thanks

Do you have UAC enabled on the 2008 server?My blog: http://cjwdev.wordpress.com

I thought I disabled it....I better doublecheck...I'll get back to you.thanks.

Hi Michaelarr,When you logon as a Domain Admin, Please right-click Ineternet Explorer and select "Run as Administrator" to start.Are these buttons grayed out?Regards,Wilson JiaThis posting is provided "AS IS" with no warranties, and confers no rights.

Ok....I correctly disabled UAC on one of my servers and I did it incorrectly on the one I was confused about. I had done it through the local policy on both, but I picked the wrong policy. So case closed. thanks,Mike