Forum Discussion

Amr Khattab's avatar
Amr Khattab
Brass Contributor
Mar 27, 2018

Domain admin account cannot install any software windows server 2012 R2

Hello everyone, Good day hope you're doing well, I use windows server 2012, Domain Administrator cannot install any software in other member computers in the domain, when I try to install any softw...
Active Directory
security
windows server
adam_d's avatar
adam_d
Copper Contributor
Mar 27, 2018
Did you setup the domain? Since the default has Domain Admin is in the Administrators group of servers and Workstations in the domain, it was most likely changed. What GPOs are applied to the OU where the workstation is located?

Here some info on how the domain admins group should be secured which might help figure out why your domain admin account doesn't have access.
https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/appendix-f--securing-domain-admins-groups-in-active-directory
Amr Khattab's avatar
Amr Khattab
Brass Contributor
Mar 28, 2018

Dear Sir,

 

Thanks for your reply, I did setup the domain, below image describes the user that was lost his administrator permissions, the User called "IT Admin", previously I can install any software in any member computer, before 2 weeks ago I cannot and this message appeared "Administrator Privileges are required to install", please find attached links for photos from Active Directory Users and Computers, Group Policy Management to advice me what should I have to do.

 

https://social.technet.microsoft.com/Forums/getfile/1246143

 

https://social.technet.microsoft.com/Forums/getfile/1246144

 

https://social.technet.microsoft.com/Forums/getfile/1246146

 

https://social.technet.microsoft.com/Forums/getfile/1246147

 

https://social.technet.microsoft.com/Forums/getfile/1246148

 

https://social.technet.microsoft.com/Forums/getfile/1246149

  • AbedEl-Hamid Al-Wahidy's avatar
    AbedEl-Hamid Al-Wahidy
    Copper Contributor
    Mar 29, 2018

    do you change the policy

    see the history

    • Amr Khattab's avatar
      Amr Khattab
      Brass Contributor
      Mar 29, 2018

      Dear Mr. AbedEl-Hamid,

       

      Good day, could you please let me know how to get more details to know if the policy changed or not.

       

      Thanks for your support and assistance.

      • adam_d's avatar
        adam_d
        Copper Contributor
        Mar 29, 2018
        Just so I don't assume. You have confirmed that Domain Admins is still a member of the local admins group of that computer?

Resources