+ Post New Thread
Results 1 to 13 of 13
Windows Thread, Active Directory Problem in Technical; I have just cleaned up our active directory as it was a shambles. I have also changed some group policys ...
  1. #1
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25

    Exclamation Active Directory Problem

    I have just cleaned up our active directory as it was a shambles. I have also changed some group policys for the better. However now i cannot add the administrators security group to a user account! It is in the active directory but when adding it to a user it cannot find it! To add to the problems I cannot add a computer to the domain as the error msg is that the domain controller isnt available! HELP!!! Please!

  2. #2
    sahmeepee's Avatar
    Join Date
    Oct 2005
    Location
    Greater Manchester
    Posts
    795
    Thank Post
    20
    Thanked 70 Times in 42 Posts
    Rep Power
    34
    Quote Originally Posted by clarky2k3 View Post
    I have just cleaned up our active directory as it was a shambles. I have also changed some group policys for the better. However now i cannot add the administrators security group to a user account! It is in the active directory but when adding it to a user it cannot find it! To add to the problems I cannot add a computer to the domain as the error msg is that the domain controller isnt available! HELP!!! Please!
    Can you connect to the DC? Can you log on to it?

  3. #3
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    Yeah I can log into the DC. I was trying to add the administrators group to a user while logged in to the DC.

  4. #4

    Ric_'s Avatar
    Join Date
    Jun 2005
    Location
    London
    Posts
    7,592
    Thank Post
    109
    Thanked 770 Times in 598 Posts
    Rep Power
    183
    Have you tried goold old NETDIAG and DCDIAG?

  5. #5
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    No i havent tried that yet but will give it a go in the morning!

  6. #6

    Join Date
    Dec 2005
    Location
    Essex
    Posts
    85
    Thank Post
    7
    Thanked 5 Times in 5 Posts
    Rep Power
    18
    Quote Originally Posted by clarky2k3 View Post
    Yeah I can log into the DC. I was trying to add the administrators group to a user while logged in to the DC.
    There lies your problem - adding a group to a user? what is that?

    Are you sure you don't mean 'add a user to a group' or 'make a user a member of a group'?

  7. #7
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    Yeah i meant adding a user to the administrators group. Thanks. This problem has screwed my head up!

  8. #8

    Join Date
    Dec 2005
    Location
    Essex
    Posts
    85
    Thank Post
    7
    Thanked 5 Times in 5 Posts
    Rep Power
    18
    Have you got any info on what you 'cleared up' clarky?

  9. #9
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    Our users are in seperate OUs depending on year group but these user groups were under the domain conrollers OU so i moved the OUs to a new Curriculum Users OU in our domain. I deleted the gpo linked to the OU and created a new GPO with some revised settings.

  10. #10

    Join Date
    Dec 2005
    Location
    Essex
    Posts
    85
    Thank Post
    7
    Thanked 5 Times in 5 Posts
    Rep Power
    18
    How many of your servers are domain controllers? Have you tried using Users and Computers to connect to each domain controller to check that changes have replicated to all of them?

  11. #11
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    We have two domain controllers and I have checked the other domain controllera and the changes have been replicated.

  12. #12
    azrael78's Avatar
    Join Date
    Sep 2007
    Location
    Devon
    Posts
    383
    Thank Post
    47
    Thanked 37 Times in 33 Posts
    Rep Power
    21
    While I've read your posts - what is it exactly you are trying to do?
    There is an 'Administrators' group on the DCs and member servers and there is 'Administrators' on the local PCs.

    While you can add users directly to the 'Administrators' group, it's usually best to create a group to house these users, and then add that group to the 'Administrators' group - the Domain Admins group is a member of the 'Administrators' group on a DC, so it may be worth adding people to that group instead of 'Administrators'.

    It's worth noting that giving someone Local Admin (on a workstation/member server) and giving someone Local Admin (on a DC) are very different in terms of what they can do.

    Local PC/Member Server - Same deal, they have full administrative access to the PC or Server, but their access (unless you grant them more access elsewhere) - remains at that server.

    DC - Giving anyone Admin access here grants them full admin access to this DC and any other DCs in your forest - this means they can do literally 'anything' with your domain - from adding users/computer accounts to using ADSIEDIT and playing with the schema. What I'm not sure is if 'Administrators' on a DC gives you full admin rights across child domains as well or whether it only gives it to you for a single domain.

    Hopefully some of this was helpful.

    Az

  13. #13
    clarky2k3's Avatar
    Join Date
    Nov 2007
    Location
    Northumberland
    Posts
    318
    Thank Post
    35
    Thanked 47 Times in 39 Posts
    Rep Power
    25
    I came in this morning and everything was fine! Thanks for everyones help!

SHARE:
+ Post New Thread

Similar Threads

  1. Active Directory Alternative HOW-TO??
    By Joedetic in forum *nix
    Replies: 17
    Last Post: 26th January 2012, 10:46 PM
  2. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  3. PDA and Active Directory
    By localzuk in forum Windows
    Replies: 4
    Last Post: 10th October 2007, 03:54 PM
  4. script for active directory
    By chalkwellstu in forum Scripts
    Replies: 8
    Last Post: 24th September 2007, 01:53 PM
  5. DNS problem under Active Directory.
    By ArchersIT in forum Windows
    Replies: 6
    Last Post: 19th February 2007, 03:09 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •