Loss of GPO Access on Win2000 Administrator Profile

[nate60532]

I enabled Kerberos Policy in Windows 2000. What happened next is Windows 2000 automatically demoted all profiles that have administrator Global rights into just having User rights. It did this even with the built-in Administrator profile. The Administrator can no longer create new users, reset passwords, or configure global security policies. Short of rebuilding the entire server, does anybody know how to restore the Administrator's Global Domain rights?

 

[Teflon]

Is the affected machine a Domain Controller? I thought Kerberos was already present, especially if the machine was a DC. It almost sounds like the machine is not part of a Domain.

Just my 2 cents.
Tef