0

Okay, so I had an issue with Powershell / Task Scheduler that I posted on SO an hour ago, and one of the answer I got suggested to check my permissions.

(for the record, I'm on a corporate Windows 7 machine)

So in the Start Menu, I opened "Give administrative rights to a domain user". I then found out my user account on the CORP domain was in the group ORA_DBA, which will have been added after I installed Oracle Database. So I thought, well okay, I'm not an administrator, better fix that. I then double clicked on my user account, and changed the checkbox to "Administrator", which was perfectly fine, I logged out, logged in, et voila, no problems. Then for some reason I thought it would be a good idea to go back to the same window and change the group of my user account back to the ORA_DBA group, logged out, logged in, and then the trouble began. Where before I (think I) had some administrative rights, now nothing that requires an administrator works anymore.

For instance, I cannot add or change tasks in the task scheduler, I then get the error message:

Task Scheduler cannot apply your changes. The user account ... does not have permission to modify the task.

Also, when I go back to the user accounts window and try to change my group yet again to administrators, I get:

`The user could not be added because the following error has occured: Access denied.``

So, I think I messed things up, doing things I am not 100% sure of what I am actually doing.

I figured I would then try to inspect my restore points and roll back to a previous one. But, when I go to Control Panel > Recovery, and I click on Open System Restore, nothing happens, because I guess you need some administrative rights for this. Looking a bit further, I figured I have no way to roll back a previous restore point.

My question now consists of two parts. 1. Have I actually messed up by switching back and forth between Administrator and ORA_DBA, or could this not have been the case, and what exactly did I do wrong, and 2. can I still fix this in a way (or at least get control over Task Scheduler again)? This all keeping in mind I'm on a corporate laptop I do not have full control over.

fixer1234
  • 28,064
konewka
  • 123

1 Answers1

3

In general, you should not be able to add your account (or any account) to the Local Admin group on your laptop unless you're already local admin on that laptop. From what you describe it sounds as though your laptop did not have correct domain policies applied and therefore allowed the first change, and then got the corrected policies and now has prevented you from setting yourself as domain admin.

I would advise that you contact your corporate IT support, let them know what you did and why. They'll either know or want to know why you were able to add your account in the first place, or if you are supposed to have admin rights, why it is not allowing you now.

music2myear
  • 49,799