IBM Support

Windows 2000 Active Directory domain group policy

Troubleshooting


Problem

Installing an endpoint on a Windows 2000 A.D. domain controller operating in native mode, can result in some members of the Tivoli_Admin_Privileges group not getting all the group's rights inherited to them.

Cause

Domain group initialization problem.

Resolving The Problem

Use the GPResult.exe tool from the Windows 2000 Resource Kit to examine
the Group Policy objects applied to the user and computer in question.
If one or more of the required rights are not present, assign them directly
to the user in question. The Tivoli_Admin_Privileges rights include:
Act as Part of the Operating System
Increase Quotas (aka "Adjust Memory Quotas for a process")
Replace a process level token

[{"Product":{"code":"SSXLSW","label":"Tivoli Management Framework"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Component":"Not Applicable","Platform":[{"code":"PF033","label":"Windows"}],"Version":"4.1;4.1.1","Edition":"","Line of Business":{"code":"LOB35","label":"Mainframe SW"}}]

Product Synonym

Framework

Document Information

Modified date:
17 June 2018

UID

swg21162898