Adding a self-managed user through active directory

[Matt]

Hey all.

I work at a large company, doing helpdesk support - we
migrating to XP from NT 4.0 in the comnig months, and we
at the desk have been on XP for the last few months
testing it on the pilot.

When we grant self-managed access to a user, we have run
into an inconsistent problem in the process.

I search out the computer's name on the domain, right
click on it and click manage. In some (not all) instances
I will have access denied to the users and groups folder
in the computer management snap-in. The odd part is, if i
try another computer, i will have access to it.

Another oddity, is a fellow colleague, tried to give self
managed access, and got access denied to the users &
groups, then when i went to try to add them, i had access
to do it - there seems to be no consistencies in this
error - we have tried it by using the FQDN, ip address as
well - and we have tried it with computers that are in the
self-managed and managed OU's - we cant figure out why
some people would see access denied on this, and some
wouldnt - we all have the same priv's on our admin
accounts, and there is nothing differnt (that we can tell)
between my account and my colleagues who got access
denied.

I hope this was explained semi-coherently - and i
appreciate any and all help -- THANKS!

-Matt

 

[Paul McGuire]

can you look in the event log and make sure the GP applied successfully? If
you are not applying this "self-managed" user to the local admin group on
the workstations then how are you? I would add the helpdesk group of users
to the local admin group on all the workstations and then use your users
account to manage the computer.

 

[Matt]

I dont know if thats something that can be done, when i
said big ocmpany, i meant real big (9 domains, 15,000+
computers) we cant really add all of us to every computer
as a local admin - i suppose they could craete a new OU
and add us, but that seems unlikely - is there any reason
1 person would get access denied and 1 wouldnt when we
have the same privs?

 

[Matt]

I also mis-read what you said - we are trying to add this
users account to the self managed group on that particular
machine, the problem is some of us here get access tdenied
to local users and groups, and some of us dont - when we
all have the same privs, what i'm asking basically is why
if 2 people with the same priv's connect to a machine,
open the computer management console, and go to local
users and groups, 1 of us get access denied, and another
has access.

Thanks.