Administrator account not recognised as an Domain Administrator

[Martyn Winters]

Installing an application on a domain controller required
me to create a "log on as service" account. The software
automates this. However, it reports an error saying that I
do not have sufficient rights to create the account. I am
logged in as the domain administrator. As an experiment, I
tried another application which I was aware did something
similar - it installs as a service and then asked for
a "log on as service" account. The same thing happened. I
have created new administrator accounts, same thing.

Anyone able to help?
Many thanks

Martyn

 

[ML]

Just try creating an account and adding it to the "log on as a service
right". If you can, you have the right permissions to perform that activity.
Possibly call the app vendor to decipher what the real problem is. If your a
domain admin, you should have the abilility to modify any GPO in the domain.
Possibly the application isn't W2K/Active Directory friendly and doesn't
understand where to add this right...Try installing it on a member server
and see if the same problem occurs.

My 2 cents...

ML

 

[Martyn Winters]

Problem resolved. For some reason, another LAN connected
to us by a VPN managed to claim the PDC Emulator role and
consequently the servers in this LAN seemed to think they
were in the domain of the other LAN. Transfering the PDC
role to a computer in our LAN has done the trick, but the
problem remains - why did it happen in the first place?

Any thoughts, anyone?

Martyn