Hi all,
I am having the strangest problem. I've been slowly rolling out an AD (2008 level) domain over our entire organization. I'm nearing the end, and was adding one of the last computers to the domain.
Bind seemed to work okay, domain users can log in, but Domain Admins clearly don't have admin privleges. I've logged in as the local administrator, and admin privleges work fine, I can see that Domain Admins is a member of the local admins group. I tried removing domain admins from the local admins group and adding it back, and tried running gpupdate /force. The computer shows up in Users and Computers on the PDC.
I can't understand why domain users would be able to log in but not be allowed admin privs when added to the correct group. Does anyone have any suggestions?
Thanks!