JEA icon indicating copy to clipboard operation
JEA copied to clipboard

Access Denied with Domain Controller endpoint

Open jmesa772 opened this issue 5 years ago • 2 comments

Whether I explicitly add Domain Admins group in the RunAsVirtualAccountsGroups parameter or not it seems that I am not being given domain access right when running cmdlets like New-ADusers or New-ADComputer

Whether to run this session configuration as the machine's (virtual) administrator account

RunAsVirtualAccount = $true

RunAsVirtualAccountGroups = 'mesa\Domain Admins'

Access is denied + CategoryInfo : PermissionDenied: (CN=jeauser2,CN=Users,DC=mesa,DC=internal:String) [New-ADUser], Unauth orizedAccessException + FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.UnauthorizedAccessException,Microsoft.ActiveDirectory.Manag ement.Commands.NewADUser

jmesa772 avatar May 08 '19 06:05 jmesa772

Hi @jmesa772 -- can you confirm the OS and patch level of your DC?

rpsqrd avatar May 08 '19 22:05 rpsqrd

Major Minor Build Revision


10 0 14393 0

jmesa772 avatar May 08 '19 23:05 jmesa772