Domain and file sharing Permissions issue

[Jamal Al-Taher]

Hello there,

I have getting error messages when I try to do anything in my Domain Controller, those messages all about that "You might not have the appropriate rights" Details: The specified network name is no longer available.

I have two DC and I'm using the Administrator account.

Here are some of my issues:

• When I try to join any machine to the domain: "The specified network name is no longer available"
• When I try to edit group policy: "You might not have the appropriate rights" Details: The specified network name is no longer available.
• I cannot access the shared folder \\DomainName\ or \\DomainIP\ or \\localhost\ and tried to share the C drive and give full control to the admin and my user, also I can't access.
• When you try to connect the secondary AD to the primary AD it shows that the RPC Server is unavailable, I’ve made a troubleshoot on this issue and checked all the related reasons to this message (by Checking the RPC services, File and network share … etc.) all of them are working fine.

Some trouble-shootings I have did but did not fix the issue:

• DNS: It's working fine
• Check all the services related to this issues.
• Network and file sharing is enabled on firewall and NIC.
• Windows Firewall is disabled.
• IPv6 is enabled.
  
• Checked the administrator membership.
• Reset the admin password.

Error messages by the BPA:

• Title:
  Domain controller mydomainname must have "Access this Computer from the Network" granted to the appropriate security principals
  Category: Configuration
  Problem: Domain Controller mydomainname does not have user right "Access this computer from the network" granted to 'Builtin Administrators', 'Enterprise Domain Controllers' or 'Authenticated Users', or has the user right "Deny access to this computer from the network" assigned to either of those groups or 'Everyone'.
  Impact: Replication operations initiated by other domain controllers in the domain or by administrators may fail. Users and computers may also experience failure to apply Group Policy objects.
  Resolution: Verify that the domain controllers in the domain mydomainname have this user right granted to the appropriate security principals. Using Group Policy Management and Group Policy Results, verify that the winning Group Policy for the "Access this computer from the network" user right grants that right to the 'Builtin Administrators', 'Enterprise Domain Controllers', and 'Authenticated Users' groups. Verify that the policy setting "Deny access to this computer from the network" does not have 'Everyone', 'Authenticated Users', 'Builtin Administrators' or 'Enterprise Domain Controllers' groups defined in it. AD DS: This domain controller must have I have troubleshooted this issue but all thins where good.
• Title: Domain controller mydomainname must have "Enable computer and user accounts to be trusted for delegation" granted to the Builtin Administrators security group
  Severity: Error
  Category: Configuration
  Problem: Domain controller mydomainname must have the "Enable computer and user accounts to be trusted for delegation" user right granted to the Builtin Administrators security group if domain controller mydomainname is used as a replication partner during a domain controller promotion.
  Impact: Installation of additional domain controllers (promoting replica domain controllers) in domain mydomainname may fail if they select domain controller mydomainname as a replication partner during the installation.
  Resolution: Verify that the current domain controllers in domain mydomainname have the "Enable computer and users accounts to be trusted for delegation" user right granted to the Builtin Administrators group.
  AD DS: This domain controller must have “Enable computer and user accounts to be trusted for delegation“ granted to the Builtin Administrators security group
  I have troubleshooted this issue but all thins where good.

I believe that those issues caused by permissions problems.

Could you help me to fix this issue?

Continue reading...