Access denied in User Manager 1

[Telemaco]

Hello, I am using NT 4 server in my network, I have three BDC in the domain, and when I try to modify any one of the properties in the User Manager, I recieved a messagge that says
" The following error ocurred changing the properties of the user xxxx : access denied "
I have this error in every domain controller.


Kind regards

 

[Voyager1]

Your login account must be a member of the Domain Admins or Account Operators group in order to make any modifications to user accounts. ;-)

 

[Telemaco]

excuse me,
I didn´t specify that I am the administrator on the network, and I'm logging as Administrator

 

[Voyager1]

OK, a couple of things to check...

1. Make sure you are using the DOMAIN Administrator account, and not a local administrator on one of the machines.

2. Are you the only administrator? If not, is it possible that someone else has removed the 'Administrator' account from the Domain Admins group?

3. If there is another administrative account, is it possible to use User Manager when logged in from that account?

 

[brianjohn]

Voyager1 -
Can you remove the Administrator account from the Domain Administrators group?

Brian John Simpson
34
2yrs Experience - Desktop Support/Helpdesk
NT Workstation 4.0
98
95
A+

 

[pepper]

I would be very surprised if you could remove Administrator from the Domain Admins group since the Administrator account is in the Administrators local group on each server by default and the Domain Admins global group is also added to this local group. However, Telemaco, it is true that you should be sure that your account is in the domain admins group and is not just the Administrator account on one of the member servers. Have you tried doing this on the PDC as well as the BDCs?

 

[Voyager1]

Yep, you can and in fact should remove "Administrator" from the Domain Admins group. A different admin account needs to be created. Think about it - anyone who has ever had anything to do with Windows NT has half the information needed to hack onto your server with that account. The password will only slow them down.

B-)