Ok, here's a weird one that I've never seen before. Running a mix of Windows Server 2000 and 2003 using Active Directory. We have several regional offices (all on the same domain) and each office has an IT support person on site. They don't have domain admin permissions, but they are in a group that is authorized to add workstations to the domain.
Well, this morning, the support person in one of the offices was building a new PC for one of the users. When she attempted to add the computer account to the domain she got the access denied message. As best I can tell, the permission is not explicitly denied anywhere. After checking and rechecking everything I could find, I figured I'd just pull her from the group, wait for replication to complete, then add her back, wait for replication, and then have her try adding the new PC to the domain. Sure enough, it worked.
Anyone experience this before?
Tom
Well, this morning, the support person in one of the offices was building a new PC for one of the users. When she attempted to add the computer account to the domain she got the access denied message. As best I can tell, the permission is not explicitly denied anywhere. After checking and rechecking everything I could find, I figured I'd just pull her from the group, wait for replication to complete, then add her back, wait for replication, and then have her try adding the new PC to the domain. Sure enough, it worked.
Anyone experience this before?
Tom
Facebook
Twitter