Administrator rights problem Windows 2008 R2

Hello,
I have a problem on a Windows 2008 R2 server member of a workgroup. It seems to be a rights problem. I have the problem with all accounts (administrator, another account member of administrators group and any other new account created for testing member
of admin group or not).
When i click on the explorer button in the task bar, an error message is displayed and explorer is not launched : Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.
Same message if i double-clic on explorer.exe in c:\windows folder. I can browse my computer by using the "my computer" in start menu.
When i launch internet explorer, it crash immediately, the window is closed.
If i launch the disk management console, i have a message : You do not have access right to Logical Manager
I have tryed to install the update KB2444677 and it fails with an access denied error.
UAC have always been disable but now i cannot launch c:\Windows\system32\UserAccountControlSettings.exe. When i double clic on the icon nothing happens.
I have disabled IE ESC but no change.
The problem occur also under safe mode.
Anybody have an idea about this problem ?
Regards

Hi PimPamPoum_59,
Please also try Go to component Services à Right Click My Computer
à Properties
à Default Properties
à Make sure Default Impersonation level is set to 'Impersonate'
in windows server 2008 r2.
For the more detailed information, please refer to this thread:
Windows Server 2008 - Unable to access Disk Management and other components - MMC Snap-in problems:
http://social.msdn.microsoft.com/Forums/windowsserver/en-US/d1576093-e000-45c5-a047-d06a5dd6f9f4/windows-server-2008-unable-to-access-disk-management-and-other-components-mmc-snapin-problems?forum=winserver2008appcompatabilityandcertification
I hope this helps.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Administrator rights running Windows XP under bootcam[

I have Win XP running under boot camp and it runs beautifully. I do have several programs that are giving me warning messages regarding Administrator rights. I am logged in as administrator under windows. Is there some difference that I need to be aware of when setting up administrator rights under Windows/Bootcamp?
Thanks,
Dale Roach

Since Fusion is not an Apple product, you might want to ask in VMware Fusion
http://communities.vmware.com/community/vmtn/desktop/fusion

Administrative rights to Windows Server

I know that we need administrative rights to a window box during
installation and configuration.
After cutover to production, is it possible for the DBA to survive if
administrative rights are revoked?
What daily/often-run tasks will be affected?
Thanks for any suggestion.
PS (Our system admin has taken away admin rights from the DBA, so far, we
are able to identify 10 problem areas, but all of them have workaround/fixes
of some sort).

There's difference between Local and Domain user in windows environment.
Local user with ORA_DBA should be able to do most Oracle administrative tasks.
However, Oracle DBA account is usually given local administrator privilege on the server.
Check more information in metalink doc Note:77665.1

MSI Group Policy install failing because of administrator rights problem

I have succesfully installed the desktop manager software 4.6 on my PC using the MSI from the CD. I am a domain administrator, when I try to install the same MSI on other users in the domain through group policy who are not administrators the software will not install. I have checked and the policy is definately being applied and it says on logon that the Blackberry Desktop Manager software is being installed but no icon or program group is created.
I don't want to give users administrator rights as the users are not allowed to install software on their PC. Normally software installs through group policy without a problem. I don't want to have to go around to each PC and install manually if I can avoid it.
Any help would be most appreciated.
Solved!
Go to Solution.

Someone else would really need to answer this, but i have my own simple solution we use here.
Create a share file eg //138.218.137.22 etc etc for the user to go to. In here save a copy of the desktop manager. Get them to click and drag it to their desktop and install the file from there. (do not install the file directly from the shared drive)
Is the cd version won't work, get the install.exe from the blackberry site..
If your issue is resolved, put a checkmark in the green box that contains the resolution.
OR
If it was just/or also really helpful - Give it a Kudos.. Go on Mate.. Help the rest of the clueless blackberry user world find their answer too..
~Gday from Down Under~

Need to provide local administrator access without domain administrator rights

Hi All,
I need to provide local admin access to one account in windows environment without providing domain administrator rights.
Windows 2008 DC. Desktops : windows 7
So that we can use this account to install agents like SCCM\SCOM in all servers & desktops.
Need suggestions.

Hi,
I agree with Senne, in addition, we can also use net command to perform local group management.
More information for you:
Add a member to a local group
http://technet.microsoft.com/en-us/library/cc772524.aspx
How to Make a Domain User the Local Administrator for all PCs
http://social.technet.microsoft.com/wiki/contents/articles/7833.how-to-make-a-domain-user-the-local-administrator-for-all-pcs.aspx
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

Oracle 11gR2 on Windows 2008 R2 - access denied error

I just installed 11gR2 on a Windows 2008 R2. When I tried to unsecure the dbconsole I noticed that an "Access is denied" error is returned, so I am not able to use the stop/start/unsecure command from emctl.
I am able to log in into the db and asm, but if I try to perform an imp/exp operation an create a log file from the operation I get an error EXP-00028: failed to open <log file name> for write.
I have already turned off the firewall, but the problem persists.
I know that Windows 2008 R2 has a lot of security enhancements that could cause issues, but I don't know what else I can turn off to deal with this situation.
BTW, I am logged with an account part of the Local Admins. and it belongs to the group ora_dba.
Thanks,
Alberto

This may be a little late but did you run the command line using the Run As Administrator option? Windows 2008 will return that error when trying to do certain privileged operations under regular user rights.

One of the SAN logical disk of windows 2008 not discovered as logical disk in SCOM 2007R2.

Hi,
Anyone can advise where should i check to make the discovery work. i have rename/restart the health service folder/scom agent on the problem windows 2008 server. it still cannot discover the logical disk which make the monitoring of logical disk not possible.

Hi,
Microsoft introduced 'SAN Policy' in Win 2008 (Enterprise and Datacenter Edition only) which causes SAN disks to not be available on startup by default, as a protection mechanism. You have to use the Diskpart.exe utility to set the policy of the disks
on that server to make them come up after a restart.
More info on similar sort of thing here.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Windows 2008 R2 on Cisco UCS B200M networking problems

This is driving me completely nuts. Let me start by saying I am new to blade servers and Cisco UCS. I did take an introduction class, and it seemed straight-forward enough. I have a chassis with two B200M blades, on which I am trying to configure two Windows 2008 R2 servers, which I will eventually make Hyper-V servers. This is all in a test environment, so I can do anything I want to on them.
Right now I have installed W2008 directly on hard disks on the B200M hardware.
The problem is this: even though I think I've configured the network hardware correctly, using the Cisco VIC driver software, I cannot get networking to work in any reliable way. I cannot even get ping to work consistantly. I can ping my local server address, but I cannot ping my gateway (HSRP address). When I try, I get a "Reply from 10.100.1.x: Destination host unreachable (x being each particular server's last octet). I CAN, however, ping the individual IP addresses of the core switches. I can also ping some, but not all, the other devices that share the servers' subnet. There are no errors being generated, the arp tables (for those devices I can ping) look good, netstat looks OK. But I cannot get outside the local subnet...
Except when I can.
There are times when I can get all the way out to the Internet, and I can download patches from Microsoft. When it works, it works as expected. But if I reboot the server, oftentimes networking stops working. Yet another reboot can get things going again. This happens even though I've made no changes to either the UCS configs or the OS.
I cannot figure out any reason when it works at some times and not at others. I've made sure I have a native VLAN set, I've tried pinning to specific ports on the Fabric Interconnects. There is just no rhyme or reason to it.
Anyone know of where I can look? I'm very familiar with Windows on stand-alone boxes (although it's no longer my area of expertise), and I manage a global WAN (BGP, OSPF, Nexus 7k, etc.) so I'm no dummy when it comes to networking, but I am utterly stumped on this one.

The problem was this: while the NICs on the blade server are called vNIC0 and vNIC1, Windows was calling vNIC1 "Local Area Connection" and vNIC0 "Local Area Connection 2". So what I configured on UCS did not match what I was configuring in Windows. Completely, utterly ridiculous.
Anyway, networking is working now without any issues. Thanks for you suggestion; it did get me looking in the right direction.

ActiveSync requiring administrative rights to synchronize data with Windows Communication apps

We are currently testing W8.1 Update 1 in our corporate environment and have run into an issue when attempting to synchronize the corporate exchange accounts with the Windows Communication apps (Mail, Calendar, People). The first problem we encountered was
the requirement for each user to log into a Microsoft account just to access the Communication apps, this was handled through GPO by enabling the "Allow Microsoft accounts to be optional" policy. We could then launch the application, were prompted
for exchange server information, but then upon attempting to synchronize received an error message stating that "To sync this account, you first need to make your Windows user account an administrator." Obviously we have no desire to make all of
our users administrators, but for the purpose of testing we added the user account to the administrators group. The same error message appears! A quick search revealed that changing the UAC to a lower setting would resolve the problem, and sure enough we then
received a prompt to Enforce Policies and synchronization completed.
This can't possibly be the intention, that every Windows 8 user using ActiveSync is required to be an administrator and has to lower the UAC. We did determine that once synchronization has been configured, the administrative rights can be removed and UAC
can be increased once again, but this is a ridiculous option.
I would really appreciate an explaination of the reasoning if this is infact the intended setup, and if it is not, then what we are doing wrong. Thank you.

Hi,
In following article, you will see that the admin permission is required to do so:
Activesync Working But Only For Some Users On Exchange 2007 / 2010
http://alanhardisty.wordpress.com/2010/03/05/activesync-not-working-on-exchange-2010-when-inherit-permissions-not-set/
Also, Microsoft's recommendation and best practice is that if you are a domain administrator that you have 2 accounts. One for your everyday user which is restricted in the same way that every other user is and a second for your administration role.
Kate Li
TechNet Community Support

Problem with upgrade Windows 2003 to Windows 2008

Hi,
I have problem with upgrade Windows 2003 to Windows 2008 R2
When I run installer it check compatibility drivers and programs after that appear message that I need to uninstall "adaptec storage manager" but I already remove this driver from the system and registry.
Any ideas to solve this problem?
My server it's IBM System x3500
Regards

Not sure if this issue was solved or no longer relevant, but I had the same issue with the same IBM x3500 server type.
Based on the SETUPACT.LOG output from the Server 2003 to 2008 upgrade compatibility check, the problem was that the driver AACMGT.SYS is unsigned, and hence not acceptable for running in Windows Server 2008.
AACMGT.SYS is a part of IBM ServeRAID but unfortunately, even the latest versions 9.3 to not seem to update or replace this file. It's also possible this file is a residue of an earlier, deprecated version of ServeRAID, I don't know.
In the end, to get passed the Upgrade check hard stop, I did this, though I'm not sure if all steps are needed:
0. Make sure you have a system backup in case you break something doing this steps. If you do break your system and cannot recover from backups, it's not my fault!
1. Go into Device Manager --> Disks and check the Driver properties for the disks on your system. You might have AACMGT.SYS listed for some/all disks and also listed as unsigned.
2. Uninstall IBM ServeRAID from the system, just in case
3. Do into Device Manager and go under Disks, and manually Uninstall all the disks in the list including "AdaptecArray SCSI Disk" and some other secondary. I did not reboot right away.
4. Go to console, go into C:\WINDOWS\SYSTEM32\DRIVERS, and rename AACMGT.SYS to something else.
5. Reboot the system and hope it still boots. Go into Device Manager -> Disks and make sure that AACMGT.SYS is no longer listed.
6. Run the 2003 to 2008 Upgrade process again. The Compatibility checker should no longer flag "Adaptec Storage Manager" as a blocker.

Oracle 11 under Windows 2008 installation problems

I cannot make Oracle 11.2.0.1.0 work under Windows 2008. The server's host name is SARABI. Anything of the following takes place on SARABI, no remote access is involved.
The procedure has been as follows...
- Windows 2008 was installed
- Oracle 11.2.0.1.0 was installed
- listener.ora, sqlnet.ora, tnsnames.ora were modified
- no other Oracle configuration file was touched
At this point it worked. I could connect with SQL Plus and with SQL Developer.
Next the server was rebooted. Without having changed anything at all, connecting was impossible. The message is "12514, TNS, listener does not currently know of service requested in connect descriptor". The three configuration files are given below.
Currently, all services are running accoording to Windows Control Panel. There are no entries in the eventlog. Executing "TNSPING SARABI" works fine. Executing "LSNRCTL status" shows "The listener does not support any services" (translated from German "Der Listener unterstützt keine Services"), the full output is given below.
--- LISTENER.ORA ---
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = SARABI)(PORT = 1521))
ADR_BASE_LISTENER = C:\Programme\Oracle\Admin
--- SQLNET.ORA ---
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
SQLNET.AUTHENTICATION_SERVICES= (NTS)
ADR_BASE = C:\Programme\Oracle\Admin\product\11.2.0\dbhome_1\log
--- TNSNAMES.ORA ---
SARABI =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = SARABI)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = ORCL)
--- LSNRCTL status ---
C:\Users\admin>lsnrctl status
LSNRCTL for 32-bit Windows: Version 11.2.0.1.0 - Production on 25-SEP-2010 11:49:24
Copyright (c) 1991, 2010, Oracle. All rights reserved.
Anmeldung bei (DESCRIPTION=(ADDRESS=(PROTOCOL=IPC)(KEY=EXTPROC1521)))
STATUS des LISTENER
Alias LISTENER
Version TNSLSNR for 32-bit Windows: Version 11.2.0.1.0 - Production
Startdatum 25-SEP-2010 11:24:54
Uptime 0 Tage 0 Std. 24 Min. 32 Sek.
Trace-Ebene off
Sicherheit ON: Local OS Authentication
SNMP OFF
Parameterdatei des Listener C:\Programme\Oracle\Admin\product\11.2.0\dbhome_1\network\admin\listener.ora
Log-Datei des Listener c:\programme\oracle\admin\diag\tnslsnr\SARABI\listener\alert\log.xml
Zusammenfassung Listening-Endpunkte...
(DESCRIPTION=(ADDRESS=(PROTOCOL=ipc)(PIPENAME=\\.\pipe\EXTPROC1521ipc)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=127.0.0.1)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=SARABI.lionsland.local.de)(PORT=1521)))
Der Listener unterstützt keine Services
Der Befehl wurde erfolgreich ausgeführt.
Michael G. Schneider

Deleting the three configuration files and recreating them with "Net Manager" gives...
--- LISTENER.ora ---
LISTENER =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = SARABI)(PORT = 1521))
ADR_BASE_LISTENER = C:\Programme\Oracle\Admin\product\11.2.0\dbhome_1\log
--- SQLNET.ora ---
NAMES.DIRECTORY_PATH= (TNSNAMES)
ADR_BASE = C:\Programme\Oracle\Admin\product\11.2.0\dbhome_1\log
--- TNSNAMES.ora ---
SARABI =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = SARABI)(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = ORCL)
After rebooting the server, the same problems appear. Executing "sqlplus SYS/**** AS SYSDBA" gives "database not started". Then executing startup gives...
ORA-00119: invalid specification for system parameter LOCAL_LISTENER
ORA-00132: syntax error or unresolved network name 'LISTENER_ORCL'
Michael G. Schneider

Windows XP Administrator rights with Itunes

Help please... is it possible to use Itunes in Windows XP without being an administrator? My daughter and I both have Ipods and have different logon names with XP, I currently have to give her Administrator rights to update her Ipod and this is quite dangerous as she knows little about pc's and likes to experiment!
hp pavilion f1904 Windows XP

itunes 7 gave me the same problem on my windows xp machine. before i upgraded to itunes 7, my ipod is recognized by itunes 6 when i dock it.
itunes 7 cannot see my ipod. Windows XP recognize my ipod when i pulg it in so I know my Ipod was not broken.
I went to apple store for some help and they are NO HELP. they only support Mac based Ipods. And suggested I purchase the phone support... YOU DONT NEED TO SPEND THAT MONEY if you paid for an IPOD.. it shoudl be working and if they released a new upgrade on softwares, it should be working on any machine they claim they support.
I tried puggin in my Ipod on an apple based machine with Itunes 7 and it worked.
I gave up Itunes 7 on my windows xp machine and re-installed the old Itunes 6. And it works FINE.

Window 2008 R2 datacentre server time problem

Hi Team,
I have one window 2008 R2 data centre server, which having time problem, I have setted IST time zone but time coming 15 minute delay, I have tried to correct time by manual but time goes again 15 minute delay itself.
Please guide how to solve it and but i don't want to use NTP, as this server is on workgroup.
Regards
Inder Singh Rawat

Hi ,
I followed following step to build NTP in window server 2008 R2.
Enabling & Configuring NTP Server
1. Change the server type to NTP.
Click Start, click Run, type regedit, and then click OK.
Locate and then click the following registry subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters\Type
In the pane on the right, right-click Type, and then click Modify. In Edit Value, type NTP in the Value data box, and then click OK.
2. Set AnnounceFlags to 5.
Locate and then click the following registry subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Config\AnnounceFlags
In the pane on the right, right-click AnnounceFlags, and then click Modify. In Edit DWORD Value, type 5 in the Value data box, and then click OK.
3. Enable NTPServer.
Locate and then click the following registry subkey:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpServer
In the pane on the right, right-click Enabled, and then click Modify .In Edit DWORD Value, type 1 in
the Value data box, and then click OK
4. Specify the time sources.
Open a command prompt and type the command as below: w32tm /config /manualpeerlist:peers /syncfromflags:manual /reliable:yes /update
peers: time.windows.com or time.nist.gov
eg: w32tm /config /manualpeerlist:time.windows.com /syncfromflags:manual /reliable:yes /update
5. At the command prompt, type the following command to restart the Windows Time service, and then press Enter:
net stop w32time
net start w32time
i run following useful command.
1. To resynchronize time : w32tm /resync or w32tm /resync /rediscover
2. To verify the configuartion : w32tm /query /configuration and w32tm /query /status
3. Display the current time zone settings : w32tm /tz
Now what problem i am facing , when server goes restart "Window time service stoped" and ntp corrupted.
Even Window time service is set automatically, when i do configure again then NTP work proper.
Please help how to resolve this problem, if server restart NTP goes corrupted becuase of window time service stopped.
Regards
Inder Singh Rawat

Windows 2008 Terminal Server "user must change password at next logon" problem with Windows 7 client.

Hi,
I have a fully patched Windows 2008 SP2 Terminal Server and a fully patched Windows 7 client.
I have logged into the Windows 2008 SP2 Terminal Server server with a test account via RDC before.
When I try to log in via RDC to the 2008 TS with a test account which has been marked with the setting "User must change password at next logon" I get the RDC message "You must change your password before logging on the first time. For assistance, contact your system administrator or technical support." I need to force the user to change their password once it has been issued, any ideas on how this can be done?
Thanks,
Dan

This does not resolve my issue all the way. I'm having the same problem; When i'm "deploying" users, i always want the users to set their own passwords. Ok, so I then set the auth mode to "RDP Security layer". It seemed to work fine, and it does for that
special purpose.
Just like Daniel, my clients are connecting to our terminal server from several/different "customer-domains" So, they can't logon locally(on their local computer) and change their password, it has to be done THROUGH the terminal server.
But if I turn on RDP Security Layer, users can't use remoteapp through tsgw they only get: "Your Remote Desktop Connection Failed because the remote computer cannot be authenticated" Any ideas?
Also, our terminal servers is round robin based in a farm. So users connect to: tsfarm.domain.com(yes, public a-record which resolves to two internal adresses) This is because, we're using a wilcard *.domain.com as SSL certificate.
But, when i'm using this, our clients sometimes get double auth when they login. I only get the double auth when tsfarm.domain.com resolves to server A, but the session broker wants the user to be on server B.(load balancing)
This does not occur when SSL is enforced, any ideas?

Windows 7, removed Administrator rights from my user with Administrator disabled..

Windows 7, removed Administrator rights from my user with Administrator disabled..how solve without restore everything please??
Cause drag&drop was disabling each time there was an high privilege process, I tough to fix this annoying trouble removing my user from Administrator group..in fact I fixed that situation.
But NOW I have another serious problem: my user is not able to do nothing, and my administrator user was disabled and as only belonging to homeuser group I cannot enable it!!! In this moment I am crying because I have fear I will need to restore everything, please do you know a way to enable the administrator user again even if without admin privilege?? Do you know a software that fix it or an also not clean way to avoid a complete restore??
Thanks in advance and ciaoo
Fabio

in control panel > user accounts > change account type select admin.
Thinkpad R61 7733-1GU
Thinkpad X61T 7762-54U
Thinkpad X60T 6363-4GU
Did a member help you today? Thank them with a Kudo!
If a post answers your question, please mark it as an "Accepted Solution"!
Regards,
GMAC

Administrator rights problem Windows 2008 R2

Similar Messages

Maybe you are looking for