Managing Computers from ADUC gives Access Denied in Computer Management
I am a domain admin and would like to manage my Windows 7 clients. I right-click win7-computers in ADUC and select Manage. Then the Computer Management comes up with the computer opened. However I cannot open any of the System tools (event viewer, shared folders etc) in Computer Management... The error is "Access is denied." When I try connect to Services and Appliactions\Services I get the error: Unable to open service control manager database on WIN7-01.domain.com. Error 5: Access is denied. What registry/group policy do I need to apply to get this working from any DC?
March 5th, 2010 4:18pm

Hi, When did the issue begin to occur, after installing certain application or hardware? Which version of operating system was installed on the DC, Windows Server 2003 or Windows Server2008? Here are some suggestions you can try: 1. Temporarily disable firewall on the DC and open Computer Management in ADUC again. Does the error message persist? 2. Modify the "System Variable". Please type "sysdm.cpl" in Run command and press Enter. Click Advanced tab and click "Environment Variables" button. Double click "Path" and set the value as below: c:\windows\system32;c:\windows;c:\windows\System32\Wbem If the issue persists, please try to open Computer Management on the local DC. Can it be opened? Meanwhile, please help collect the Microsoft Product Support (MPS) Reports on your computer. ============================================================================== Microsoft Product Support Reports tool is utilized to gather detailed information regarding the current system configuration. The data collected will assist us with fault isolation. a. Download Microsoft Product Support Reports tool from the following Microsoft link, according to your system architecture. http://www.microsoft.com/downloads/details.aspx?FamilyId=CEBF3C7C-7CA5-408F-88B7-F9C79B7306C0&displaylang=en b. Right-click on the downloaded mpsreports_x86.exe or mpsreports_x64.exe, and choose Run as Administrator. c. Agree the License Agreement, and choose This Computer. d. Select General, Internet and Networking, Business Networks, Server Components, and click Next. e. After finishing collecting logs, please choose Save the result to save it to a .CAB file, and send the CAB file to the Workspace below. f. Please upload the txt file to your SkyDrive at www.skydrive.live.com and let me know the link. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
March 10th, 2010 9:26am

We use both Windows 2003 and 2008 DC's. This happens when I try from a Windows 7 Client using a username that is member of Domain Admins. I try connect to another Windows 7 client which is also a member of the domain. I wonder if the clients need to run the WinRM service. How do I configure this using group policy?
March 11th, 2010 4:07pm

Hi,The service should be started in the clients when trying to remote management. Based on my research, I suggest you also refer to the following article to troubleshoot the issue.What's New in Server ManagerIf the issue persists, please capture the screenshot and upload it for research. Thanks, Novak
Free Windows Admin Tool Kit Click here and download it now
March 12th, 2010 10:55am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics