Create a new domain account and make it a member of Domain Admins. Then log in
to the second server with that and see what it can do.
----- Original Message -----
From: Len Hammond
To: NT System Admin Issues
Sent: Sunday, January 20, 2008 12:56 PM
Subject: Re: permissions problem
It's a brand new domain and I have made NO policy changes to the DC. I have
enabled several services that I always enable like Messenger and Alerter
services so that users can get print job completion notices and such but that
is all of the chnages made. I didn't remember making any changes to the other
domains I created to get this to work. In this domain I have set the Admin
password to the member server the same as the password to the admin account for
the domain and there might be some kind of confusion in the member server over
that. After lunch today I will change the Admin password in hte domain and see
if that make any changes and lets me do what I need to do. Keep the ideas
coming - I'll try just about anything at this point.
Thanks for the thoughts
Len
On Jan 20, 2008 11:08 AM, Steve Pruitt <[EMAIL PROTECTED]> wrote:
I don't think there's anything special needed - the default configuration
should allow what you want. You should see what groups your account is in,
what's in the local administrators group on the second machine, what GPOs
apply, and review anything else you might have configured.
Steve
----- Original Message -----
From: Len Hammond
To: NT System Admin Issues
Sent: Sunday, January 20, 2008 8:49 AM
Subject: Re: permissions problem
I was using a Domain Admin Account. Although the local admin account does
exactly the same thing. I'm thinking that I missed something in the setup of
the DC - like enabling something in policy that would let a Domain Admin set
things on member servers. I must not be googling for the right keywords because
this should not be this obscure to find the solution to. It can't be that hard
as I've done it for another scratch built domain a couple of years ago. I just
can't seem to remember what it was. <scowls at self>
Len
Was it something about delegation of authority? on the DC?
Len
On Jan 19, 2008 10:32 PM, Steve Pruitt <[EMAIL PROTECTED]> wrote:
Are you using a domain admin account or a local admin account on the
second server? That sounds like a local account, though I haven't tried doing
that.
Steve
----- Original Message -----
From: Len Hammond
To: NT System Admin Issues
Sent: Saturday, January 19, 2008 10:23 PM
Subject: permissions problem
Hi people,
Been off the list a while. My corporate gig ended a while back and
now I'm doing some freelance stuff while looking for another permanent
position. But now I have a problem with a new domain I'm setting up for a
small non-profit.
Background:
New domain (they are peer to peer until I get the new domain built
and installed)
New DC (HP dl380) - Server 2003 - file & print shares
New database member server (HP dl360) - Server 2003 - small database
program and a couple of small, low usage file shares.
One XP workstation
Problem: for some reason I can't set domain permissions on the member
server shares. When attempting to set permissions the only item in the list is
the member server name, the DC server name is not listed and the 'location'
selection button and selection line is not accessible and cannot be changed
from the member server name to the domain name.
The member server is a member of the domain. I even tried removing
the member server and adding it back to the domain without success. It has
been a long time since I set up a new domain with more than one server so maybe
my feeble memory is forgetting a step in the setup. My googling has not turned
up an answer yet. Could someone kindly refresh my memory?
Thanks
--
Len Hammond
Hammond Enterprises
[EMAIL PROTECTED]
~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~
~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
