Forum Discussion
Amr Khattab
Mar 27, 2018Brass Contributor
Domain admin account cannot install any software windows server 2012 R2
Hello everyone,
Good day hope you're doing well, I use windows server 2012, Domain Administrator cannot install any software in other member computers in the domain, when I try to install any software in any member computer this message appeared "Administrator Login required", if I want to activate local administrator in any computer using domain administrator account this message appeared "The following error occurred while attempting to save properties for user administrator. Access is denied", when I want to access Local Group Policy using domain administrator account in any member computer this message appeared " You do not have permission to perform this operation, Access is denied",
could you please help me in this issue.
Thanks.
- adam_dCopper ContributorDid you setup the domain? Since the default has Domain Admin is in the Administrators group of servers and Workstations in the domain, it was most likely changed. What GPOs are applied to the OU where the workstation is located?
Here some info on how the domain admins group should be secured which might help figure out why your domain admin account doesn't have access.
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-f--securing-domain-admins-groups-in-active-directory- Amr KhattabBrass Contributor
Dear Sir,
Thanks for your reply, I did setup the domain, below image describes the user that was lost his administrator permissions, the User called "IT Admin", previously I can install any software in any member computer, before 2 weeks ago I cannot and this message appeared "Administrator Privileges are required to install", please find attached links for photos from Active Directory Users and Computers, Group Policy Management to advice me what should I have to do.
https://social.technet.microsoft.com/Forums/getfile/1246143
https://social.technet.microsoft.com/Forums/getfile/1246144
https://social.technet.microsoft.com/Forums/getfile/1246146
https://social.technet.microsoft.com/Forums/getfile/1246147
https://social.technet.microsoft.com/Forums/getfile/1246148
- AbedEl-Hamid Al-WahidyCopper Contributor
do you change the policy
see the history