Domain Administrator does not have Local Administrator Privileges on New DC Server

Question

Just migrated from a 2012R2 DC Server to a 2019. The migration went pretty smoothly and there are no errors in DCDIAG. The Domain Administrator account on the new server does not have local administrator privileges. I can't even reboot the server without using CTRL + ALT + DEL to do it from task manager. Other issues are installing and changing printers, etc. Everything has to be run with elevated privileges or I can't run it at all (like installing new printer drivers). It's the only issue I am having with the new server. I tried creating a Local Admins GPO and that didn't change anything. Scratching my head on this one!

Thanks!

Answer 1

Not sure what is meant. If the new server is a domain controller then there are no local accounts.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

I understand that, but it acts like it doesn't have any local privileges. It can't do anything without run as admin or it's grayed out and not available at all. I can't even reboot the computer from the start menu. I have to use CTRL + ALT + DEL. I have to run command prompt as administrator to even run ipconfig or dcdiag without getting an error or incomplete info.

Answer 3

Might check this one is Enabled

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

Yes, it's enabled. I think I tried every iteration of modifying local policies (which I also have to run as administrator to edit) and nothing. I have tried different GPO settings, etc. and nothing seems to stick. I had a similar issue with another Server 2019 migration earlier this year but only minimal issues that didn't interfere with running most of the server functions.

Answer 5

Yes, everything migrated correctly including FRS to DFRS. DCDIAG shows everything is healthy. Everything you mentioned above has already been completed. The new DC is fully functional.