Home

Windows Server 2019 Fresh Active Directory Promotion Bugs

%3CLINGO-SUB%20id%3D%22lingo-sub-297155%22%20slang%3D%22en-US%22%3EWindows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-297155%22%20slang%3D%22en-US%22%3E%3CDIV%20class%3D%22thread-message-content-body-text%20thread-full-message%22%3E%3CP%20class%3D%22%22%3EHi%20Everyone%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20having%20issue%20with%20a%20fresh%20domain%20controller%20promotion%20issue%3F%20I've%20found%20quite%20a%20number%20of%20users%20mention%20about%20Start%20Menu%20unable%20to%20change%20after%20promoting%20the%20server%20to%20a%20domain%20controller%20however%20seems%20no%20one%20mention%20about%20this.%3C%2FP%3E%3CP%20class%3D%22%22%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat%20I%20encounter%20is%20apart%20from%20the%20issue%20with%20the%20Start%20Menu%2C%20anything%20that%20relating%20to%20administrative%20privileges%20it%20will%20say%20%22Windows%20cannot%20access%20the%20specific%20device%20path%20or%20file.%20You%20may%20not%20have%20the%20appropriate%20permission%20to%20access%20them%22%20also%20the%20%22Authenticated%20Users%22%20is%20not%20inputted%20into%20the%20C%20drive%20and%20the%20%22Windows%22%20folder.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECheers%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EYong%20Jin%3C%2FP%3E%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-297155%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EManagement%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESecurity%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327446%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327446%22%20slang%3D%22en-US%22%3E%3CP%3E--%20Update%20and%20possible%20workaround%20--%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20noticed%20that%20after%20I%20demoted%20the%20server%20from%20a%20domain%20controller%2C%20but%20still%20part%20of%20my%20domain%20and%20logged%20in%20as%20a%20Domain%20Admin%2C%20that%20if%20I%20ran%20control.exe%20As%20Administrator%2C%20I%20was%20able%20to%20make%20changes.%26nbsp%3B%20%26nbsp%3BOn%20a%20hunch%20I%20checked%20at%20UAC%20was%20turned%20on%20by%20looking%20at%20the%20registry%20key%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHKEY_LOCAL_MACHINE%5CSOFTWARE%5CMicrosoft%5CWindows%5CCurrentVersion%5Cpolicies%5Csystem%20-%20EnableLUA%20was%20set%20to%200x0000001%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20changed%20this%20value%20to%20zero%20and%20rebooted.%26nbsp%3B%20I%20was%20then%20able%20to%20change%20whatever%20I%20wanted%20without%20the%20error%20message.%26nbsp%3B%20%26nbsp%3BI%20was%20also%20able%20to%20logoff%20and%20back%20on%20without%20having%20to%20make%20further%20changes.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20promoted%20the%20server%20back%20to%20a%20domain%20controller%20and%20all%20was%20well%20there%20too.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'll%20do%20some%20more%20testing%20and%20report%20back%20if%20the%20situation%20changes.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326951%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326951%22%20slang%3D%22en-US%22%3E%3CP%3EWell%20there%20seems%20isn't%20a%20fixed%20but%20a%20temporary%20workaround%20was%20posted%20by%20someone%20previously%20and%20I've%20tested%20it%20works.%20By%20disabling%20Continue%20Experience%20in%20GPO%20you%20can%20get%20to%20change%20the%20Start%20Menu%20but%20you%20will%20have%20to%20do%20it%20everytime%20you%20logon%20a%20bit%20irritating%20but%20better%20than%20cannot%20be%20change.%20I'm%20still%20waiting%20for%20a%20perm%20fixed%20which%20doesn't%20seems%20to%20be%20on%20anyone%20list%20%3A(%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326946%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326946%22%20slang%3D%22en-US%22%3E%3CBLOCKQUOTE%3E%3CHR%20%2F%3ESame%20issue%20here.%26nbsp%3B%20I%20demoted%20the%20server%20and%20the%20issue%20persists%20even%20as%20a%20standalone%20server.%26nbsp%3B%20Did%20you%20ever%20get%20a%20work%20around%3F%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'm%20not%20sure%20what%20to%20do%20but%20to%20back%20off%20and%20try%20to%20re-install.%3C%2FP%3E%0A%3CHR%20%2F%3E%3C%2FBLOCKQUOTE%3E%0A%3CP%3EI'd%20start%20a%20new%20thread%20detailing%20your%20issues.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-326942%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-326942%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F250602%22%20target%3D%22_blank%22%3E%40cyongjin%3C%2FA%3E%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3E%26nbsp%3BSame%20issue%20here.%26nbsp%3B%20I%20demoted%20the%20server%20and%20the%20issue%20persists%20even%20as%20a%20standalone%20server.%26nbsp%3B%20Did%20you%20ever%20get%20a%20work%20around%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20not%20sure%20what%20to%20do%20but%20to%20back%20off%20and%20try%20to%20re-install.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-297428%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%20Server%202019%20Fresh%20Active%20Directory%20Promotion%20Bugs%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-297428%22%20slang%3D%22en-US%22%3E%3CP%3ESome%20others%20here.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FWindows-Server-Insiders%2FStart-menu-layout-cannot-be-changed%2Ftd-p%2F267195%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FWindows-Server-Insiders%2FStart-menu-layout-cannot-be-changed%2Ftd-p%2F267195%3C%2FA%3E%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20report%20this%20issue%20over%20here%20on%20uservoice.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwindowsserver.uservoice.com%2Fforums%2F295047-general-feedback%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwindowsserver.uservoice.com%2Fforums%2F295047-general-feedback%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
cyongjin
New Contributor

Hi Everyone,

 

Anyone having issue with a fresh domain controller promotion issue? I've found quite a number of users mention about Start Menu unable to change after promoting the server to a domain controller however seems no one mention about this.

 

What I encounter is apart from the issue with the Start Menu, anything that relating to administrative privileges it will say "Windows cannot access the specific device path or file. You may not have the appropriate permission to access them" also the "Authenticated Users" is not inputted into the C drive and the "Windows" folder.

 

Cheers,

 

Yong Jin

5 Replies

@cyongjin @Dave Patrick Same issue here.  I demoted the server and the issue persists even as a standalone server.  Did you ever get a work around?

 

I'm not sure what to do but to back off and try to re-install.


Same issue here.  I demoted the server and the issue persists even as a standalone server.  Did you ever get a work around?

 

I'm not sure what to do but to back off and try to re-install.


I'd start a new thread detailing your issues.

 

 

Well there seems isn't a fixed but a temporary workaround was posted by someone previously and I've tested it works. By disabling Continue Experience in GPO you can get to change the Start Menu but you will have to do it everytime you logon a bit irritating but better than cannot be change. I'm still waiting for a perm fixed which doesn't seems to be on anyone list :(

-- Update and possible workaround --

 

I noticed that after I demoted the server from a domain controller, but still part of my domain and logged in as a Domain Admin, that if I ran control.exe As Administrator, I was able to make changes.   On a hunch I checked at UAC was turned on by looking at the registry key:

 

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system - EnableLUA was set to 0x0000001

 

I changed this value to zero and rebooted.  I was then able to change whatever I wanted without the error message.   I was also able to logoff and back on without having to make further changes.

 

I promoted the server back to a domain controller and all was well there too.  

 

I'll do some more testing and report back if the situation changes.  

 

 

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies