davebrads1972 Posted March 20, 2012 Posted March 20, 2012 Just experienced a strange issue with a remote desktop session and hoped somebody could shed some light on this for me please. Im running a small domain with a couple of servers and a dozen clients and I obviously have the standard inbuilt administrator account Administrator in active directory. From this created a copy of this account in AD and called it RDadmin I then use this RDadmin account as my remote desktop administrators account to log into the DC server and perform admin duties. I have an application running on the server (WINCCOA from Siemens) and cannot perform an admin based task in this application such create a project when Im connected via remote desktop using the RDadmin account yet it works perfectly fine when I log onto the server locally with the standard administrator account ? Obviously the two accounts should be identical as RDadmin is copied from administrator so is there another layer of access control or security stopping me performing these tasks ? Im pretty new to sever administration but Ive always created these remote desktop admin accounts from the inbuilt administrators account and used them without issues (or so I thought). Im I missing something really simple. Any help would be great. Quote
ICTCity Posted March 23, 2012 Posted March 23, 2012 don't confuse domain with local. You can be a domain admin but not a local admin. Login into the server and set under LOCAL ADMINISTRATORS the RDadmin account. Let me know if this helps. Quote -------------------------------------------------------- Tu peux aussi crire en franais. Du kannst auch auf Deutsch schreiben. Puoi scrivere anche in italiano. --------------------------------------------------------
davebrads1972 Posted March 28, 2012 Author Posted March 28, 2012 Thanks for the reply. Im not too sure if Im missing something but how do you "set under local administrators" on a server ? I thought there was'nt actually any "local" groups on a AD domain controller ot am i just been a bit thick ? As I said, I actually copied the administator account (is this "local" or "domain") so it has identical group memberships (as far as i can see), i.e its in the "administrators" group and "domain administrators" group. It's wierd that copying an account, giving it a new name and password doesnt actually create identical accounts like I thought it would, as the original administrators account does indeed seem like to act like an administrator account, yet a copy of it does'nt ? If you could shed any more light on this I would be greatful... Thanks again for all your help Quote
Recommended Posts