Server 2008 differences between 2 "identical" users

We have two domain admin accounts which we think are identical, but which
seem to have slightly diffferent levels of access to our Windows 2008 servers
(physical and virtual)

For example one can access and manage the Hyper-V machines from a Vista
workstation using the mindre.net gadget, but the other cannot.

One can access the D: drive on a Virtual File server, the other is told
"access denied". However through the Share and Storage Manager everything is
fine.

The group policy results are identical and we have looked in the local
admins groups and so on. Any ideas?
--
Carol Chisholm

Hello CarolChi,

None of both accounts is the builtin Administrator, this has special permissions
then a domain admin?

So on the "member of" tab in the user account properties both are in the
same security groups?

Is the one that doesn't work correct, member of the Hyper-V admins?
http://searchservervirtualization.te...331785,00.html

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> We have two domain admin accounts which we think are identical, but
> which seem to have slightly diffferent levels of access to our Windows
> 2008 servers (physical and virtual)
>
> For example one can access and manage the Hyper-V machines from a
> Vista workstation using the mindre.net gadget, but the other cannot.
>
> One can access the D: drive on a Virtual File server, the other is
> told "access denied". However through the Share and Storage Manager
> everything is fine.
>
> The group policy results are identical and we have looked in the local
> admins groups and so on. Any ideas?
>

They are not the built in Administrator account.
The differences show on several different servers, but only on Windows 2008
servers.
Both accounts can administer Hyper-V, but only one can use the sidebar
gadget to access the Hyper-V hosts.
Both accounts can use the Storage Manager to modify shares on the file
server, bit only one can access the folders directly.
One is a member of Enterprise and Schema admins for doing Exchange upgrades,
the other is not.
Both are in Domain Admins and Domain users.
--
Carol


"Meinolf Weber [MVP-DS]" wrote:

> Hello CarolChi,
>
> None of both accounts is the builtin Administrator, this has special permissions
> then a domain admin?
>
> So on the "member of" tab in the user account properties both are in the
> same security groups?
>
> Is the one that doesn't work correct, member of the Hyper-V admins?
> http://searchservervirtualization.te...331785,00.html
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > We have two domain admin accounts which we think are identical, but
> > which seem to have slightly diffferent levels of access to our Windows
> > 2008 servers (physical and virtual)
> >
> > For example one can access and manage the Hyper-V machines from a
> > Vista workstation using the mindre.net gadget, but the other cannot.
> >
> > One can access the D: drive on a Virtual File server, the other is
> > told "access denied". However through the Share and Storage Manager
> > everything is fine.
> >
> > The group policy results are identical and we have looked in the local
> > admins groups and so on. Any ideas?
> >
>
>
>