I have recently been made an Administrator on our server (running Win Server 2003) and have been given all the same permissions and made part of the same groups as our other admin but when I try to access the Group Policy Editor it tells me my access is denied because I don't have the appropriate permissions. I also cannot add or edit any users in the Active Directory. I go through the process and then when I finish it says "Error, Contact your System Administrator."
When I'm logged into the other admin's user account I can access the Group Policy Editor and create users in the Active Directory without problems. From his account I opened both our profiles in the active directory and confirmed that we are members of the same groups and have the exact same security permissions.
I went to the Group Policy Object in the Active Directory and it appear that the granular permissions are disabled so everyone in a particular group should have the same permissions right?
Also, I don't have a list of ALL the groups I'm a member of at the moment but I do know that I'm a member of the following groups: ENTERPRISE ADMINS, DOMAIN ADMINS, DOMAIN CONTROLLER ADMINS, SYSTEM ADMINS, SCHEMA ADMINS and the Local Administrators.
Why is my access being denied to anything? Where else should I be looking to diagnose this? How can I resolve this?
UPDATE: I tried doing all this directly from the server as well as by a remote connection to the server from one of the clients. Everything has been restarted several times since I was made an admin.
DenyACE somewhere for you or a group that you're in? The simplest to check might be editing users in AD - turn on Advanced Features in the View menu, then open the properties dialog on a user you can't edit. Security tab -> Advanced -> Effective Permissions tab, enter your user in there and see what it returns. – Shane Madden Jan 30 at 23:16