question

CarmenGoodin-0468 avatar image
0 Votes"
CarmenGoodin-0468 asked FanFan-MSFT commented

Domain Admin Access not working

We recently hired a new domain admin and after setting up his account he is not able to log into any of our domain controllers nor is his credentials working to join computers to the domain. The following is the error he receives when trying to log into Domain Controller from VMware console connection. "The sign-in method you're trying to use isn't allowed. For more info, contact your network administrator." He is also not able to connect via RDP. All existing Domain Admins are able to connect via both ways. We removed him from all other groups other than the Domain Admin group.

windows-server-2012
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

2 Answers

FanFan-MSFT avatar image
0 Votes"
FanFan-MSFT answered

Hi,

It seems the user was not allowed to RDP to the DCs.
I would suggest you check the group policy :Allow log on through Remote Desktop Services under computer configuration>policies>windows settings>security settings>local policies on the default domain controller GPO
39143-11121.jpg
On domain controllers: Administrators group was able to RDP to DCs by default.
If you want to assign the permission to other users, you can add the users to the administrators group or add the user through the group policy mentioned.




11121.jpg (111.9 KiB)
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

CarmenGoodin-0468 avatar image
0 Votes"
CarmenGoodin-0468 answered FanFan-MSFT commented

We don't have any of those GP's set and nothing is tied to this OU besides the default domain GP.
I ended up reaching out to a local Microsoft support and they were able to find a work around.

Thanks for the assistance.

Carmen Goodin

· 1
5 |1600 characters needed characters left characters exceeded
Toggle Comment visibility. Current Visibility: Visible to all users

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT avatar image FanFan-MSFT ·

Hi,
That's great!
Thanks for your updates.

0 Votes 0 ·