I just build a Windows 2008 Enterprise R2 x64 domain controller I added a user "admin1" who's member of the domain admins. When I log with "admin1" on another Windows 2008 Enterprise R2 x64 server each time I try to run a .msc or run any .exe file (like an sql 2008 setup) I receive the following error : "Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item" If I log with the local administrator everything is fine but not with a domain admin Any ideas ?

Hi Veslap , Also add your user (admin1) in local admin's group on that particular system. Regards. Shafaquat Ali.M.C.I.T.P Exchange 2007 M.C.I.T.P Windows Server 2008 M.C.T.S OCS Server 2007 R2

Hi Shafaquat, I've add "admin1" as part of the local administrator group but the name don't show up when I return in my administrators group, and if I try to add it again I receive "admin1 is already a member of group "Administrators" which means it's "in". But I still have the same issue of not being able to run any .exe and .msc

When you went to the local Administrators group, what Domain Admins already a member of that group? Sounds like something got crossed. If it is a new server, try unjoining it from the domain and rejoining it.Tim Harrington - Catapult Systems - http://HowDoUC.blogspot.com

Hi Veslap, I will suggest you that Harrington is right and you should unjoin and than rejoin the server from domain. Regards. Shafaquat Ali.M.C.I.T.P Exchange 2007 M.C.I.T.P Windows Server 2008 M.C.T.S OCS Server 2007 R2

Hello, what you see is expected and belongs to UAC(User Account Control), even members of the enterprise/domain/local admins group have to use elevated commands with RUNAS. The other option is to disable UAC which i wouldn't recommend. You can use GPOs under computer configuration, windows settings, security settings, local policies, security options, in the right pane "User account control:......................." to configure it for your needs. There is NO need to rejoin the machine to the domain, that will not resolve this.Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

I had the same problem on a virtual domain environment I had built for myself. One of my servers would not grant full administrative rights to my Domain Admins users even though UAC was disabled. What I did to resolve the issue was to re-enable UAC, reboot and then I disabled UAC once again after the reboot. My server now lets me run admin level operations without prompting me with an annoying message. Good Luck !