Access Denied In windows 2008 Server R2

Hi team,
I ma trying to implemet a Lab setup to impelment 2008 AD/DNS/DHCP and work on SCCM 2007 deployment concepts. We have two 2008 R2 server adn one Win 7 mahcine all in Workgroup environment.
I tried to Promote one of the Server to DC. As the initial steps, i loaded the AD DS binary files in the mahcine and renmed the machine name to something accrording to DC standards. I did all this logged in with the defauld Administrator acct.
We rebooted the machine and i cant login with the dafualt Administrator acct anymore. I am gettin Access Denied.
I connected to the computer mgmt snapin remotely created a new user, added to administrators group,Remote desktop users group and can login with the newly created account. but not the Deafult Administrator acct. Have anyone come across similar issues. Please
letme know what could be the issue, since i have never faced this issue before :-( :-(
AppGN

Hiya,
It sounds like the following:
1: When you started working with your server you were using your local Administrator account, doing everything on the server.
2: When you promoted it to a DC, it no longer has a local Administrator account, but only a Domain Administrator account. You need to login using <Domain>\Administrator and not <ServerName>\Administrator. When you try to logon, it will have the
previously used local administrator account as the account.
3: When you remote connected you just wrote Administrator, which resolved to the domain administrator account, hence you were able to login and create the new account.
That would be my guess :)

Similar Messages

  • Access denied in Windows 2012 Server Manager after a period of time working without problems

    Hello,
    I had 2 servers with windows 2012 installed in a domain (dc is in a 3rd server) and both added to server manager of each other. Both servers had Failover cluster installed and configured roles. After startup in both servers i can see the other and manage
    it without problems (in server manager and failover cluster manages) but after a period of 30-40 minutes in both servers I see "Online - Data Retrieval failures Ocurred" for the partner server and "Online - Access Denied" for local server.
    When I access de Failure Cluster Manager I had errors accessing resources and roles and can´t failover the cluster.
    I removed the failover cluster thinking that could be the original problem, remove servers from domain, change names and add again to the domain without install failover cluster.
    Now, the servers have not the failover cluster feature and the problem persists. 30-40 minutes after boot the server manager show messages of inaccesible partner with same messages. I tried to execute powershell commands to add a new ip to the NIC and I
    receive a Access Denied Message and show Access Denied message in other events in log.
    I´m using Domain Administrator Account and tried different solutions but not solved. I saw that this message can occur in a variety of different scenarios, but i don´t know why works during a period of time before failing. It´s frustrating
    Regards
    EDITED: in detail of Online - Data retrieval failures i see that: Configuration refresh failed with the following error: The metadata failed to be retrieved from the server, due to the following error: The WS-Management service cannot process the request.
    The WMI provider returned an 'access denied' error.

    Hi PabloVDL,
    It seems is this two server has register the incorrect DNS, please try to add this server manage NIC IP to your manager hosts file or if possible trmpory disable the useless NIC DNS register. This issue also some times caused by when you installed
    the HP insignth management, if in your environment you have this tools please temporarily uninstall it.
    More information:
    Windows Server 2012 - Server Manager Troubleshooting Guide, Part III: Common
    Events and Errors in Server Manager
    http://social.technet.microsoft.com/wiki/contents/articles/13445.windows-server-2012-server-manager-troubleshooting-guide-part-iii-common-events-and-errors-in-server-manager.aspx
    I’m glad to be of help to you!
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • Windows 2008 Server crashed - How to find location of remote shared files that they used to access on remote web app?

    We have a client that was running windows 2008 server.  A previous IT person had setup their system, so we were walking into a situation where there were many unknowns.  Server was mainly handling emails only, and we were able to get their exchange
    database off and export PSTs to hosted exchange via microsoft.
    Everything went fine with that, however one user said that he used to access files on the server via the remote web app as he described.  He would go to the following url:
    https://mail.theirdomain.com/remote/menu.aspx#
    and he would use his login and then he would see several links to folders.  He could then click on those and see his desired files.  
    We were able to get the server booted again, however we could not find any of the files he described on it at all, leaving me to suspect that perhaps this remote link was accessing another PC.  
    We have the old server up and running, however the link above is no longer active because we have pointed the domain to the new hosted exchange server.  As I am still learning and my boss wanted me to research this on my own and figure out how to find
    out where these files are located.  Any advice would be greatly appreciated.  
    Just as a note I did try access mail.localhost.com/remote/menu.aspx# on the server but this did not work.  Is there any way in the IIS 7 management console to figure out where this was pointing to?  

    I figured it out - The server was using sharepoint to host these files.  I browsed localhost:987 and opened the sharepoint site locally on the server.  They had several documents to be exported, however when clicking on Open in Explorer it was
    giving an error that local client was not configured.  I installed Desktop Experience and after that was able to open it in Windows Explorer and copy all files off.  

  • Error connecting to the SAP SRV on Windows 2008 Server platform

    Hi All
    We have a problem with one of our clients they bought a new sbs windows server 2008 and we loaded sql 2005 and sap b1 SP01 PL07.
    When we did the SBO install we experience connection issues and we created odbc connection on the server using named pipes and tcp/ip (used both server name and Ip address).
    We also configured the server in configuration manager and we managed to login and solved the slow system connection issue. We also created odbc connection on the client machines. (Machine are on a workgroup and users have administration access on all machines),we also installed native client on all machines.
    After the first batch of client installs we managed to have connection, they were other computers which were left out during the first client install and now the client want to do the remaining machines connected to SBO. On every machine that we install now we get the same error :-
    *Connection failed:
    SQLState:'08001'
    SQl Server error:10060
    [Microsoft][SQL Native Client] TCP Provider: A connection attempt failed because the connected party didnot properly repsond after a period of time, or established connection failed because connected host has failed to respond.
    Connectioin failed:
    SQLState:'HYT00'
    SQL Server Error:0
    [Microsoft][SQL Native Client]Login timeout expired
    Connection failed:
    SQLState:'08001'
    SQL Server Error: 10060
    [Microsoft][SQL Native client] An error has occurred while establishing a connection to the server. When connecting to the sql server 2005, this failure may be cause by the that*
    Please help as most user who need access can't login and they are the main users.
    rgds,
    Bongani Dlamini

    Hi Eric,
    yes we are using Windows 2008 SBS for the SAP EHP4 FOR SAP ERP 6.0/NW7.01 installation.
    we tried to create the key but it says access is denied.
    Actual thing is we got the server with Windows 2008 server 64 bit SBS (standard FE) with Domain Controller (DC) configuration.
    We have removed the DC using dcpromo to convert into Wokgroup and tried the SAP installation.
    I hope you got the idea and please let me know any further suggestions or it is the problem with the license.
    Thanks & Regards,
    Prabhu Reddy.

  • Crystal Reports 2011 not working in windows 2008 server CITRIX

    Hi All,
    We are using  Crystal reports 2011 in windows 2008 server which is CITRIX farm., having crystal reports 2011 runtime in it..
    We are using .net applicationton to run the reports.
    The crystal reports parameter popup is getting opened. But the calendar icon is not fuctioning ..clicking on the calendar control no pop up appears. no error too..
    OK button is not responding. Cancel button too.
    Can you please help us why we are facing this issue in CITRIX only. When we are using the same version in desktop, Crystal report is working fine.
    Please feel free to ask if required any more details about my problem.
    Regards,
    Venkat.K

    Ido's idea is excellent, only addition I'd like to make is the following:
    You are trying to run a .NET app. However, CR 2011 does not install any SDKs. So, the directory specified by Ido is not correct. Assuming that by CR 2011 you actually mean "SAP Crystal Reports, Developer Version for Visual Studio .NET", then the directory would be:
    C:\Program Files (x86)\SAP BusinessObjects\Crystal Reports for .NET Framework 4.0\Common\Crystal Reports 2011\crystalreportviewers\prompting
    If that does not help, use Process Monitor and see what the logs tell you (look for Access Denied messages).
    - Ludek
    Senior Support Engineer AGS Product Support, Global Support Center Canada
    Follow us on Twitter

  • Windows 2008 Server R2 not loading Desktop

    Hi All,
    I have windows 2008 server R2 using as Database server.Today when i try to login it is showing two more user accounts in the login screen and i login to the server with administrator account but it was showing a blue screen(not blue screen error) with mouse
    pointer.I press Ctrl+Alt+Del and open task manager>new task>desktop and click open its showing that "windows cannot access the specified device,path or file.You may not have the appropriate permissions to acess the item.

    From cmd.exe session run SET then look for
    USERNAME=Administrator
    USERPROFILE=C:\Users\administrator
    If you see USERPROFILE=C:\Users\administrator.000 (or similar) then the original local administrator profile was corrupt or otherwise orphaned.
    In days past one could create a new account with local administrative rights, logon with new account, then after saving off docs, etc. from corrupt/abandoned profiles use
    Control Panel|Users and Passwords and delete the old profile stores. Then when you next logon a new profile is created from an image in
    \default user Have not tried this on anything newer vintage than server 2003 though.
    Regards, Dave Patrick ....
    Microsoft Certified Professional
    Microsoft MVP [Windows]
    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

  • Windows 2008 server OS authenticated user keeps failing

    I have a new server that has windows 2008 server installed, 64-bit. I've installed oracle 11gR2 64-bit and have created my database. Now I need to create two oracle accounts that are OS authenticated and I can't seem to get this right. I've set os_authent_prefix in my spfile and I've created the user (example) OS$<domain>\<username> in the database. In Windows, the account name equals <username> and that account belongs to Administrators and ora_dba groups. I've tried creating the oracle user with <domain> in caps and lowercase, but both fail. On the server, the domain is all lower case.
    So in SQL> create user "OS$my.domain.mil\user1" identified externally; (user created)
    Grant connect to "OS$my.domain.mil\user1";
    Log out of sqlplus, pull up command prompt in Windows 2008 server as 'user1' and type in "sqlplus /"
    Invalid username or password.
    What am I missing here? Any help appreciated.
    SA feedback: "Finally, Windows Server 2008 R2 Operating System has a tighter security scheme than that of previous Windows OS.
    Also, it would be helpful if I remove the AD domain controller role from this server. This may require reinstallation of this server (worst case). Let me know when I can do this so you can proceed with your configuration."
    Edited by: wolfeet on Jun 21, 2011 5:02 PM

    Hello Ricardo,
    You may want to reference SAP Note 1054740 - SAP System Installation on Windows Server 2008
    and ensure you are on SAP Netweaver 7.0 SR3 or above, and it will also tell you if the product you are installing is supported in Windows 2008 Server.
    For database and SAP product combinations that are already
    supported by SAP to run on Windows Server 2008, see the Product
    Availability Matrix at: http://service.sap.com/pam
    Also check the following: in Regedit.
    SYSTEM\CurrentControlSet\Services\gpsvc
    Right click on it and select "Permissions" in the context menu.
    Provide "Full Control" for sidadm
    Does the installation user has full administrative rights and belongs
    to the group of LocalAdministrators and to Global Administrators also
    when you are doing a domain installation ?
    Please ensure the user <sid>adm has the access rights
    to change the file system permission.
    Regards,
    Paul

  • Windows 2008 Server R2 & SAP Business One

    Does anyone have any experience, good or bad, with SAP Business One and Terminal Service on Windows 2008 Server R2?  We are finding a number of issues with this configuration and we are looking for any feedback that is out there.
    Here is the situation - our customer is running SAP Business One v2007 SP01 PL09 Hotfix4 on a Windows 2008 Server R2 machine.  All users (15 max) access SBO via Terminal Service to this machine, which also holds the databases (SQL Server 2005).  The machine currently has 20GB of RAM.
    What we are finding is:
    1) When any process related to SBO (SBO core or add-ons) consumes some portion of memory, none of that memory is ever released back to the O/S until SBO is completely closed.  So over the course of a day each user ends up simply consuming more and more memory as forms are opened for transactions.  While we do see this in Windows 2003 Server to some extent, at least some memory is released when a given form is closed.
    2) Once the system hits a point where around 75% of RAM is consumed the users start seeing application "hangs" and are forced to manually terminate SBO (via Task Manager) and restart.  There doesn't seem to be any paging or use of virtual memory (if my terms are right) in use.
    3) If the system is busy and a new window/form is opened the new window immediately (within one or two seconds) presents the "Not Responding" message on the new window.  Depending on the circumstances the application is simply waiting for resources and will continue opening normally.
    I would appreciate feedback from anyone who has experience with Windows 2008 Server R2; and especially using it for Terminal Services.  My personal feeling is that it is a platform that should be avoided but we would certainly like to hear what other folks have to say.
    Regards,
    Ross Unger
    Third Wave Business Systems

    I believe the supporting of this OS is still on Planned basis.  You may check with SAP support to give them a good user case to fight with any non-compatible issues.
    Thanks,
    Gordon

  • Windows 2008 Server Configuration - Help

    Hello All,
    I am not an expert in configuring servers and I have just started to learn. Please forgive me if I am doing something funny!
    I have a router with static IP address and DHCP enabled on the router. The router had the following configuration as shown below and the clients were obtaining IP address from the router and using the internet without a problem.
    Router Configutaion:
    Basic Setting:
    IP Address : 122.165.60.160 (My Wan Static IP)
    IP Subnet Mask : 255.255.252.0
    Gateway IP: 122.165.60.1
    DNS Address:
    Primary DNS : 203.145.184.32
    Secondary DNS: 203.145.184.13
    Lan TCP/IP Setup:
    IP Address: 192.168.2.1 (Router IP)
    IP Subnet Mask: 255.255.255.0
    DHCP Enabled:
    Statring IP : 192.168.2.11 
    Ending IP: 192.168.2.100
    Now, I have installed Windows 2008 R2 Server with Active Directory, DNS and DHCP, IIS. I have created a few users and did nothing more than that in the server.
    Server IP Settings
    Server IP: 192.168.2.5
    Subnet : 255.255.255.0
    Gateway : 192.168.2.1
    DNS: 127.0.0.1
    And when I tried to join the domain i created... corp.globe.com the clients were not able to find the domain I therefore changed the following settings in the router.
    DNS Address:
    Primary DNS : 203.145.184.32
    Secondary DNS: 192.168.2.5 (Server IP)
    After this change the clients were able to join the domain and login as well. However the clients were getting the IP from the router. I am facing a lot of problems as listed below.
    1. I am not able to ping the clients using the computer name from the server.
    2. Clients cannot ping other clients or server using name. (Suppose if I try... PING SYS1 .... It looks like it is trying to ping some 92.x.x.xx IP address) even if SYS1 IP address is 192.168.2.13
    3. Clients can access Internet, but I cannot browse anything in the server.
    Please help me in the configuration, or point me to some guide which describes the same. I tried to set up and enable the DHCP server using Windows 2008 machine and I disabled it DHCP on the router, clients where able to get the IP address from Windows 2008
    server, but they were not able to use internet. Please advise.
    Thanks for your time.

    Hi,
    And you cannot ping the clients using the computer name from the server?
    Did you turn off the firewall on server and client?
    If you are having problems connecting to Active Directory and you have already successfully verified network connectivity, there might be a name resolution problem. For more and detail information, please refer to:
    http://technet.microsoft.com/en-us/library/cc961921.aspx
    Regards.
    Vivian Wang

  • Install error 11gR2 on Windows 2008 Server R2

    Hello,
    I have a question about an installation error I received on Windows 2008 Server R2 while trying to install the 11g R2 on an test machine. I had downloaded both cd's and extracted them and copied the first cd into an new directory and then tried to copy the second cd into this directory, unfortunately I didn't saw that this step failed. As I started the installation I first didn't saw any error, later the installer brought some exceptions due to missing files (oc4j, context).
    I then copied the second cd again (this time it worked) and continued with the installer until it finished.
    My question is now, as there are some files missing, do I have the possibility to reinstall the software and which is the best way? Must i first uninstall the software and install it again or does it work if i start the installation (i select only software) again selecting the existing ORACLE_HOME so that the installation is overwritten.
    I hope you can help me with an solution for this.
    Many thanks in advance to all for your help.
    Regards
    Luis

    Hi,
    If in one oracle home you have a successful installation, oracle will automatically deny the installation of a new software in this existing home. If you have a filed installation in some oracle home, then later you can install in the same directory as oracle does not consider this failed installation as a proper oracle home hence it overwrites everything. Even you can't uninstall this failed installation because as i told you that this is not considered an oracle home. but, better way is to run installer and see whether you have an oracle home registered in the directory in which you want to install again and if you find one, then do a deinstall. If you don't see this directory as oracle home, then still better to delete what ever is inside this directory and do the installation.
    Under current scenario, your installation is fine and you should not worry.
    Salman

  • Installing CF8.0.1 64 on Windows 2008 Serv

    Does anyone have a set of instructions on installing CF8.0.1
    64bit on Windows 2008 Server. I have tried on and off for the last
    two weeks and have made no progress. The install goes great,
    however the CF administrator component of the install fails with a
    HTTP Error 500.0 - Internal Server Error. IIS7 worked fine prior to
    coldfusion installation, however once CF 8.0.1 gets installed IIS7
    appears to break. I've read the other thread in the forum and the
    suggestions made there don't help or have already been done.
    Module IsapiModule
    Notification ExecuteRequestHandler
    Handler AboMapperCustom-72626
    Error Code 0x800700c1
    Most likely causes:
    - IIS received the request; however, an internal error
    occurred during the processing of the request. The root cause of
    this error depends on which module handles the request and what was
    happening in the worker process when this error occurred.
    - IIS was not able to access the web.config file for the Web
    site or application. This can occur if the NTFS permissions are set
    incorrectly.
    -IIS was not able to process configuration for the Web site
    or application.
    -The authenticated user does not have permission to use this
    DLL.
    -The request is mapped to a managed handler but the .NET
    Extensibility Feature is not installed.
    Things to try (from the error summary page)
    - Ensure that the NTFS permissions for the web.config file
    are correct and allow access to the Web server's machine account.
    - Check the event logs to see if any additional information
    was logged.
    - Verify the permissions for the DLL.
    - Install the .NET Extensibility feature if the request is
    mapped to a managed handler.
    - Create a tracing rule to track failed requests for this
    HTTP status code.
    Adobe in going to expect a $6700 check from me in another
    week or so and the damn thing doesn't install to the point where
    the demo's will run. Windows 2008 and IIS7 isn't that new and I
    can't imagine that the number of people having done this is limited
    to the one or two in this forum and that there is no technote avail
    to us that have to depend on internet support and published
    technotes that can document the installation procedure of CF 8.0.1
    64bit on windows 2008.
    It's the fourth of July and this is a fine place to be.
    Happy 4th everyone!

    Please see this link:
    http://www.jasonholden.com/blog/index.cfm/2008/5/6/Coldfusion-8-on-Windows-Server-2008

  • PS CS5 Write Acess Error saving to a windows 2008 server share

    Hi Everyone,
    Our macs are running Snow Leopard 10.6.7 and we save/open files on a Windows 2008 Server via SMB,
    this particular problem, seems to be happening only with Photoshop:
    Sometime, when we try to save an image, photoshop returns a write access error
    at that time, if you go to the finder and take a look at the folder, the file had simply vanished.
    If you close the image, all lost.
    Everything is fine with Indesign and illustrator.
    Any help would be much appreciated!!
    Thank you all very much in advance.
    William

    Thanks for the reply Chris,
    I am trying to look for a solution on the Mac OS side, this problem happens from time to time.
    People keep trying to use Active Directory and log macs on it, it's always a problem.
    And to make things worse, apple changes the way Mac OS handles network tasks,
    they did it with 10.5 and 10.6. Well, we have to deal with that, right?
    Thanks again
    All the best
    William

  • WLC 5508 LDAP Windows 2008 Server - auth based on AD groups

    hi NG,
    i'm trying to web-authenticate my Wifi user of an WLC 5508 against LDAP.
    Thereby i'm trying to autenticate all users within a GROUP, not an OU within the MS Active Directory based upon an Windows 2008 Server.
    I can authenticate against a user, witch is beeing put into an OU, according to examples based here: https://www.cisco.com/en/US/products/ps6366/prod_configuration_examples_list.html
    Checking based upon Users within OUs works fine.
    But i have not got all of those users wihin one single OU!
    Need help for following:    LDAP-Auth based on AD Groups:
    Using:
    MS-Domain:                          MY-DOMAIN.CH
    AD-GROUP:                          VPN-USERS
    AD-Structure:
    MY-DOMAIN.CH
    |
    GROUPS
            |
        Administrative Groups
                          |
                     VPN-USERS
                              (-> Member of this Groups (Wireless1, Wirless2, ...)
    Server Adress:               IP.IP.IP.IP
    Port:                                 389
    Enable Server Stats      YES
    Simple Bind                    Authenticated
    Bind Username              LDAP-USER
    Bind Password               supersecret
    Bind Passw. confirm      supersecret
    User Base DN:               ?-1-?
    User Attribute:                ?-2-?
    User Object Type:          Person
    Server Timeout               2
    What happens for instance, if i put a GROUP within a GROUP regarding the LDAP Authentication.
    I guess i have to authenticate against the "upper" GROUP, or do i have to create an entry on the WLC for every GROUP i'm questoning?
    Could some one provide my with an example, since i have not found documentation regarding this topic.
    Thank you.

    Hi,
    User Base DN : this is in case you want to restrict the search area. If you put "dc=mydomain,dc=CH", you will search your whole AD. Depending on the size, it can be slow ...
    Remember that the User Base DN is also used for the admin user.
    In conclusion, User Base DN should be the most restrictive path that leads to both the admins and the users you want to authenticate.
    Example :
    OU=Employees,OU=Humans,DC=Mydomain,DC=CH
    This would prevent to search in machines or any assets. This implies that the admin you bind with is an employee and you are only authenticating employees. You can have any number of OUs under employees, it doesn't matter
    Attribute : This is the object attribute that the WLC uses to compare with the user name. In general, you would go with sAMAccountName in AD. CN would be another common example for LDAP databases.
    If what you are looking for is to restrict access and only authenticate people who belong to a certain group. Then you need a radius server like ACS.
    That server will be able to make selections and check the "memberOf" attribute to make sure it is in a certain group.
    Nicolas
    ===
    Don't forget to rate answers that you find useful

  • How to install a plugin on 64 bits windows 2008 server?

    From the developer forum, I found a description which told me how to install a plugin on windows series system, but I only succeded intalling the plugin on 32 bits windows xp, couldn't install the plugin on 64 bits windows 2008 server. Any ideas or advices, men of genius? Thanks :-)

    Please check if all your plugins are up-to-date. To do this, go to the [http://mozilla.com/plugincheck Mozilla Plugin Check site].
    Once you're there, the site will check if all your plugins have the latest versions.
    If you see plugins in the list that have a yellow ''Update'' button or a red ''Update now'' button, please update these immediately.
    To do so, please click each red or yellow button. Then you should see a site that allows you to download the latest version. Double-click the downloaded file to start the installation and follow the steps mentioned in the installation procedure.

  • How to install Cisco Work 3.2 on Windows 2008 Server Standard R2

    Hi Everyone,
    I have got Cisco Works LAN Management 3.2. But the problem is that i have a Windows 2008 Server Standard R2 and when i try to install, it fails. What I read from the below link is that it supports
    "Windows 2008 Server Standard and Enterprise Edition with Service Pack 1 and 2. Both 32-bit and 64-bit operating systems are supported on the above versions."
    http://www.cisco.com/en/US/partner/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/data_sheet_c78-534877.html
    Please help me out on how i should install on the Windows 2008 Server Standard R2. If there is any patch or any other way out.
    Awaiting your response.
    Farid

    Hi ,
    LMS 3.2 is not supported on Windows 2008 Server Standard R2.
    here is the supported platoform for LMS 3.2
    http://www.cisco.com/en/US/docs/net_mgmt/ciscoworks_lan_management_solution/3.2/install/guide1/prereq.html#wp1110367
    Thanks,
    Gaganjeet

Maybe you are looking for