My AD account gives me admin privileges on our PCs (allowing me to install software, add PCs to our domain, change network configuration, etc). But with a small handful of PCs (Windows 2000 and Windows XP) when I log in I only seem to have standard privileges.
It does accept my username and password so it must be talking to one of our domain controllers (can't be using cached credentials because it's the first time I'm logging into these PCs). I've tried pointing it to different domain controllers, but that doesn't make any difference.
I've tried refreshing group policy on the PCs, that completes without errors but doesn't make any difference.
I've tried moving the PCs into different OUs, including ones that other PCs work okay in, again it doesn't make any difference.
Asked my colleagues (who have similar accounts) to log in using their accounts. No difference.
What other things should I be checking?