Forum Discussion

Amr Khattab's avatar
Amr Khattab
Brass Contributor
Mar 27, 2018

Domain admin account cannot install any software windows server 2012 R2

Hello everyone, Good day hope you're doing well, I use windows server 2012, Domain Administrator cannot install any software in other member computers in the domain, when I try to install any softw...
Active Directory
security
windows server
Amr Khattab's avatar
Amr Khattab
Brass Contributor
Mar 28, 2018

Dear Sir,

 

Thanks for your reply, I did setup the domain, below image describes the user that was lost his administrator permissions, the User called "IT Admin", previously I can install any software in any member computer, before 2 weeks ago I cannot and this message appeared "Administrator Privileges are required to install", please find attached links for photos from Active Directory Users and Computers, Group Policy Management to advice me what should I have to do.

 

https://social.technet.microsoft.com/Forums/getfile/1246143

 

https://social.technet.microsoft.com/Forums/getfile/1246144

 

https://social.technet.microsoft.com/Forums/getfile/1246146

 

https://social.technet.microsoft.com/Forums/getfile/1246147

 

https://social.technet.microsoft.com/Forums/getfile/1246148

 

https://social.technet.microsoft.com/Forums/getfile/1246149

AbedEl-Hamid Al-Wahidy's avatar
AbedEl-Hamid Al-Wahidy
Copper Contributor
Mar 29, 2018

do you change the policy

see the history

  • Amr Khattab's avatar
    Amr Khattab
    Brass Contributor
    Mar 29, 2018

    Dear Mr. AbedEl-Hamid,

     

    Good day, could you please let me know how to get more details to know if the policy changed or not.

     

    Thanks for your support and assistance.

    • adam_d's avatar
      adam_d
      Copper Contributor
      Mar 29, 2018
      Just so I don't assume. You have confirmed that Domain Admins is still a member of the local admins group of that computer?
      • Amr Khattab's avatar
        Amr Khattab
        Brass Contributor
        Apr 01, 2018

        The Problem was solved

         

        Many thanks for all for support

         

    • adam_d's avatar
      adam_d
      Copper Contributor
      Mar 29, 2018
      Have any of the following policies been applied to the GPO for that OU:

      Computer Configuration\Policies\Windows Settings\Security Settings\Local Settings\User Rights Assignments:

      Deny access to this computer from the network
      Deny log on as a batch job
      Deny log on as a service
      Deny log on locally
      Deny log on through Remote Desktop Services user rights

      Also, can you confirm that the computer is located in that OU.

      As to your question, you should be able to see the last modified of the GPO by going to it's properties.
      • Amr Khattab's avatar
        Amr Khattab
        Brass Contributor
        Apr 01, 2018

        Dear Mr. Adam,

         

        Thanks for your reply, all of mentioned policies are not applied, kindly find attached photo,

         

        Please note I disable the local group policy in the IT OU then the problem not happened on computers which using windows 10 but still occurred in Windows 7 machines, please let me know what should I have to do to fix this issue,

         

        Many thanks,

Resources