Error Message "Access Denied" When Opening Microsoft Management Console (MMC) (267308)



The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server

This article was previously published under Q267308

SYMPTOMS

If you log on by using the built-in Administrator account, when you attempt to open a snap-in in Microsoft Management Console (MMC), you may receive an "Access Denied" error message.

In addition, when you start the Active Directory Users and Computers snap-in, the Edit button is not available (grayed out) on the Group Policy tab in the organizational unit Properties window.

CAUSE

This issue can occur if a domain controller was upgraded from Windows NT, and the built-in Administrator account was removed from the Administrators group when the domain controller was still running Windows NT.

RESOLUTION

To resolve this issue, add the Administrator account to the Administrators group by using the Active Directory Users and Computers snap-in.

MORE INFORMATION

This behavior may occur if the built-in Administrator account group membership is altered. The built-in Administrator account group membership cannot normally be edited in Windows 2000.

The Administrator account is a member of the Administrators group by default.

Modification Type:MinorLast Reviewed:1/26/2006
Keywords:kbenv kberrmsg kbprb KB267308