Protected Users Restrictions

%3CLINGO-SUB%20id%3D%22%5C%26quot%3Blingo-sub-3166536%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3EProtected%20Users%20Restrictions%26lt%3B%5C%2Flingo-sub%26gt%3B%3CLINGO-BODY%20id%3D%22%5C%26quot%3Blingo-body-3166536%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CP%3EI%20added%20my%20administrative%20user%20to%20the%20Protected%20Users%20group%20in%20AD.%20Now%20I%20have%20some%20strange%20restrictions%3A%20-%20I%20cannot%20browse%20the%20AD%20from%20another%20server%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3E-%20I%20cannot%20see%20the%20functional%20level%20of%20the%20domain%20on%20a%20DC%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3E-%20I%20cannot%20open%20the%20console%20%22Domains%20and%20Trusts%22%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3EWhen%20remove%20this%20user%20from%20the%20Protected%20Users%20group%20everything%20works%20fine%20again.%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%26lt%3B%5C%2FP%26gt%3B%3C%2FP%3E%3CP%3EAny%20suggestions%3F%26lt%3B%5C%2FP%26gt%3B%26lt%3B%5C%2Flingo-body%26gt%3B%3CLINGO-LABS%20id%3D%22%5C%26quot%3Blingo-labs-3166536%5C%26quot%3B%22%20slang%3D%22%5C%26quot%3Ben-US%5C%26quot%3B%22%3E%3CLINGO-LABEL%3EActive%20Directory%26lt%3B%5C%2Flingo-label%26gt%3B%26lt%3B%5C%2Flingo-labs%26gt%3B%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3C%2FLINGO-SUB%3E
New Contributor

I added my administrative user to the Protected Users group in AD. Now I have some strange restrictions: - I cannot browse the AD from another server

- I cannot see the functional level of the domain on a DC

- I cannot open the console "Domains and Trusts"

When remove this user from the Protected Users group everything works fine again.

 

Any suggestions?

1 Reply

@mbfischer 

I solved it:

You need to use the "User Principal Name2 instead of the "User Logon Name". Then everything works fine.