no XP admin rights at local or domain level

We have a DC running off Windows Server 2008 Ent. All systems are running
Windows XP, but one of them is refusing to grant admin right locally or from
the domain. Logged into system with my domain UN/PW which is part of the
Administrators group & Domain Admins. The Administrators group on the local
machine has Domain Admins and my domain account is a member of that group.

I try to manage from the server but am denied rights to alter or even view
system settings. It won't allow me to change the local administrator
password. I get the same result when logging on at the client system. I saw
a post stating to open gpedit.msc on the client machine, but access to that
is denied as well

I have done numerous mal-ware scans with numerous on-line scanners and what
is already installed. Nothing is found by any of the scanners and no
suspicious in or outbound traffic is being detected by our firewall from that
system.

No other system on our network has this problem.

Have you tried using local built-in Administrator account to determine
whether you are running into the same issue?

hth
Marcin

"Jeff" <Jeff@discussions.microsoft.com> wrote in message
news:38EA368C-3D10-4F66-A4FC-5EE40A0E4572@microsoft.com...
> We have a DC running off Windows Server 2008 Ent. All systems are running
> Windows XP, but one of them is refusing to grant admin right locally or
> from
> the domain. Logged into system with my domain UN/PW which is part of the
> Administrators group & Domain Admins. The Administrators group on the
> local
> machine has Domain Admins and my domain account is a member of that group.
>
> I try to manage from the server but am denied rights to alter or even view
> system settings. It won't allow me to change the local administrator
> password. I get the same result when logging on at the client system. I
> saw
> a post stating to open gpedit.msc on the client machine, but access to
> that
> is denied as well
>
> I have done numerous mal-ware scans with numerous on-line scanners and
> what
> is already installed. Nothing is found by any of the scanners and no
> suspicious in or outbound traffic is being detected by our firewall from
> that
> system.
>
> No other system on our network has this problem.

Is it possible this machine has lost the trust relationship with the domain?

run nltest /sc_verify:yourDomainName

If this fails either re-establish the trust or remove and add from the
domain.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.


"Jeff" <Jeff@discussions.microsoft.com> wrote in message
news:38EA368C-3D10-4F66-A4FC-5EE40A0E4572@microsoft.com...
> We have a DC running off Windows Server 2008 Ent. All systems are running
> Windows XP, but one of them is refusing to grant admin right locally or
> from
> the domain. Logged into system with my domain UN/PW which is part of the
> Administrators group & Domain Admins. The Administrators group on the
> local
> machine has Domain Admins and my domain account is a member of that group.
>
> I try to manage from the server but am denied rights to alter or even view
> system settings. It won't allow me to change the local administrator
> password. I get the same result when logging on at the client system. I
> saw
> a post stating to open gpedit.msc on the client machine, but access to
> that
> is denied as well
>
> I have done numerous mal-ware scans with numerous on-line scanners and
> what
> is already installed. Nothing is found by any of the scanners and no
> suspicious in or outbound traffic is being detected by our firewall from
> that
> system.
>
> No other system on our network has this problem.