AD admin account Permission

Question

Hello,

I have an issue of windows permision, i am an Adminstrator AD account, and i cannot open the Manage Optional features,

tit says: windows cannot access the specified device, path, or file. you may not have appropiate permissions to access the item. I have try every thing to fix this problem but nothing is working--

Windos server 2019

Answer 1

Hello
Thank you for posting in Q&A forum.

Based on the description, I understand you are an Administrator AD account, and when you sign in one domain client machine using this Administrator AD account, you cannot open Settings\System\Optional features, am I right?

If I understood the question correctly, please try to troubleshoot the issue as below:

1.Please check if the issue occurs on only one domain machine, you can try to sign in other domain machines and check if you still have the problem.

2.You can try to sign in the same domain machine using one local Administrator account, then check if there is the same problem. If there is no such problem when you use local Administrator account, it seems the problem is related to your Administrator AD account (not related to the machine).

3.Please try to change another AD domain Admin accounts to sign in the domain machine, then check if the other domain admin accounts have the same problem.

4.You can try to export the user policy about Administrator AD account and then check if there is any GPO policy blocked it.

For checking User Configurations within gpresult, we can follow steps below.

Logon the machine using this Administrator AD account.

Create a folder named F1 in C drive.

Open CMD (do not run as Administrator).

Type gpresult /h C:\F1\gpo.html and click Enter.

Open gpo.html and check if there are these gpo permissions or rights settings related to this Administrator AD account under "User Details".

5.If the problem only occurs on your Administrator AD account and other domain admin accounts do not have such problem, you can compare the permissions or rights (including group membership, group policy settings and other settings) between your Administrator AD account and other domain admin accounts.

I hope the information above is helpful.

If you have any questions or concerns, please feel free to let us know.

Best Regards,

Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.