Hi, I have a server running Windows 2008 R2 SP1, that is a domain member, not DC. I've added my AD account (which is a member of the Domain Administrators group) to the server's local administrators group. Yet i do not have administrator privileges. I was trying to run Robocopy to copy entire directories and it told me i do'nt have sfficient privileges. I cant run defrag. I have to right click the command prompt icon and run as admin. Any help is appreciated, Thanks, Al

Try to disable UAC and check if this solve your problem. Also, you can use the run as an administrator when you would like to perform administrative tasks. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

When an administrator logs on, the user is granted two access tokens: a full administrator access token and a "filtered" standard user access token. By default, when a member of the local Administrators group logs on, the administrative Windows privileges are disabled and elevated user rights are removed, resulting in the standard user access token. Lets say for an example the standard user access token is used to launch the desktop (Explorer.exe). Explorer.exe is the parent process from which all other user-initiated processes inherit their access token. As a result, all applications run as a standard user by default unless a user provides consent or credentials to approve an application to use a full administrative access token. Contrasting with this process, when a standard user logs on, only a standard user access token is created. This standard user access token is then used to launch the desktop. Hence all the command line activities needs Elevated permissons whihc is default by Design in windows 2008http://www.virmansec.com/blogs/skhairuddin

As noted, you probably need to use the "Run as administrator" feature. Also, if the Restricted Groups feature of Group Policy is enforcing membership in the local Administrators group, it may be removing your account from this group. Check to make sure you are still a member. More on Restricted Groups at this link: http://support.microsoft.com/kb/279301 Richard Mueller - MVP Directory Services