Hi, In my active directory environement when a PC is added to the domain its local Administrator account gets disabled. But if i try to enable it through the secpol.msc on the PC, it says "Access is denied, unable to save the Local Policy database". How this can be avoided, i don't want this to happen on other PCs as i have to add more new PCs to the domain. Please help !

What is PC operating system? Have you checked your GPOs in AD, do not you disable administrator account there?With kind regards Krystian Zieja http://www.projectnenvision.com Follow me on twitter My Blog

When connected to the domain, the AD GPO will be applied at each login, which if set to remove/disabled the local administrator account, it will do so. On one of your domain controllers, enter the GPO configuration and navigate to the following policy: User Configuration\Preferences\Control Panel Settings\Local Users and Groups\New\Local Group Adam Curry