+ Post New Thread
Results 1 to 9 of 9
Windows Server 2008 R2 Thread, Admin rights going funny in Technical; seem to currently be unable to change many settings in the control panel, they are locked down exactly like the ...
  1. #1
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    934
    Thank Post
    131
    Thanked 168 Times in 131 Posts
    Blog Entries
    1
    Rep Power
    65

    Admin rights going funny

    seem to currently be unable to change many settings in the control panel, they are locked down exactly like the staff's, though i am not in their group, and the domain admins gpo works for the other admins users...any ideas? (i still seem to have admin access, as I can delete wireless connections etc, which staff users can't....

  2. #2

    Join Date
    Jan 2013
    Posts
    81
    Thank Post
    20
    Thanked 11 Times in 11 Posts
    Rep Power
    6
    ensure your not picking up a policy from anywhere else. do a gpresult /r and see if there is anything weird appearing.

    Maybe do a gpupdate /force to make sure you are getting the right policy?

  3. #3
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    934
    Thank Post
    131
    Thanked 168 Times in 131 Posts
    Blog Entries
    1
    Rep Power
    65
    nothing strange appearing with that gpresult tool ;picking up the itadmins gpo as i should :S

    tried removing my self and readding to relevant groups put still unable to view anything in control panel, and as mentioned before i can still perform admins tasks, which makes it weird.

  4. #4

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,751
    Thank Post
    860
    Thanked 906 Times in 751 Posts
    Blog Entries
    9
    Rep Power
    330
    Was your user account previously in a staff OU intead of the admin OU? If so any settings applied to the account from the staff OU will not be automatically unapplied - they will remain inforce until either a) you delete your user profile and force a fresh passing of the GPO's, or b) apply new GPO's with opposite setting to those that where used in the staff OU (Enabled settings become explictly Disable, Diabled setting explicity Enabled).

    Wherever a GPO setting is set to "Not Applied" then the last setting (Enabled/Disabled) the account encounted will remain active.

  5. #5
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    934
    Thank Post
    131
    Thanked 168 Times in 131 Posts
    Blog Entries
    1
    Rep Power
    65
    That may explain it, i have had issues with my accounts recently, had to recreate my logon one or two times since i have had a windows 8 computer. and i did accidentally set it up as staff (thought it was on my previous account creation, but maybe not!)

    If i delete my v2 folder then, will it automatically get created when i next logon? (bit uncomfortable with this on a vanilla network, had issues before. i miss our old RM days of resetting profiles!)

  6. #6

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,751
    Thank Post
    860
    Thanked 906 Times in 751 Posts
    Blog Entries
    9
    Rep Power
    330
    Yes, it will be autocreated next logon. But... you will lose anything stored in your profile (internet favourite, screen saver settings, background pic, desktop contents, etc).

    Is it a roaming or local profile? If it's roaming then you need to make sure it is deleted from both the PC and the server. Also on the PC you need to make sure the profile is deleted from the registry as well. There is a GUI friendly way of doing this but I can't recall as I've always done it the hard way (manually delete the profile then manually edit the registry).

  7. #7
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    934
    Thank Post
    131
    Thanked 168 Times in 131 Posts
    Blog Entries
    1
    Rep Power
    65
    Thanks, if that's the case, would you be able to put on here what the regedit is for it?

  8. #8

    tmcd35's Avatar
    Join Date
    Jul 2005
    Location
    Norfolk
    Posts
    5,751
    Thank Post
    860
    Thanked 906 Times in 751 Posts
    Blog Entries
    9
    Rep Power
    330
    You need to find out what the GUID for the user account is. Should be listed in AD in the Attribute Editor tab of the user account (will need to turn on Advanced Features in AD Users & Computers view menu). Then it's just a case of finding the matching GUID in the offending computers registery under HKEY_USERS and deleting the entire subtree.

  9. #9
    Tesla's Avatar
    Join Date
    Nov 2013
    Location
    Milton Keynes
    Posts
    934
    Thank Post
    131
    Thanked 168 Times in 131 Posts
    Blog Entries
    1
    Rep Power
    65
    Think i'm just going to create a new account for myself, may look into sorting that account out as an exercise when there's less going on.

SHARE:
+ Post New Thread

Similar Threads

  1. grant temp admin rights
    By mtupker in forum Scripts
    Replies: 17
    Last Post: 8th September 2007, 07:55 PM
  2. Replies: 4
    Last Post: 25th April 2007, 11:22 AM
  3. Connection Fails Without Admin Rights
    By MrDylan in forum ICT KS3 SATS Tests
    Replies: 8
    Last Post: 12th May 2006, 12:23 PM
  4. Assistant Network Managers admin rights.
    By tosca925 in forum How do you do....it?
    Replies: 11
    Last Post: 8th December 2005, 01:32 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •