Remote Desktop Admin Privileges

[davebrads1972]

Just experienced a strange issue with a remote desktop session and hoped somebody could shed some light on this for me please.

 

Im running a small domain with a couple of servers and a dozen clients and I obviously have the standard inbuilt administrator account Administrator in active directory. From this created a copy of this account in AD and called it RDadmin I then use this RDadmin account as my remote desktop administrators account to log into the DC server and perform admin duties.

 

I have an application running on the server (WINCCOA from Siemens) and cannot perform an admin based task in this application such create a project when Im connected via remote desktop using the RDadmin account yet it works perfectly fine when I log onto the server locally with the standard administrator account ? Obviously the two accounts should be identical as RDadmin is copied from administrator so is there another layer of access control or security stopping me performing these tasks ?

 

Im pretty new to sever administration but Ive always created these remote desktop admin accounts from the inbuilt administrators account and used them without issues (or so I thought). Im I missing something really simple. Any help would be great.

[ICTCity]

don't confuse domain with local.

 

You can be a domain admin but not a local admin. Login into the server and set under LOCAL ADMINISTRATORS the RDadmin account.

 

Let me know if this helps.

[davebrads1972]

Thanks for the reply. Im not too sure if Im missing something but how do you "set under local administrators" on a server ? I thought there was'nt actually any "local" groups on a AD domain controller ot am i just been a bit thick ?

As I said, I actually copied the administator account (is this "local" or "domain") so it has identical group memberships (as far as i can see), i.e its in the "administrators" group and "domain administrators" group.

It's wierd that copying an account, giving it a new name and password doesnt actually create identical accounts like I thought it would, as the original administrators account does indeed seem like to act like an administrator account, yet a copy of it does'nt ?

 

If you could shed any more light on this I would be greatful...

 

Thanks again for all your help