So here is the scenario, you log into a computer as ether a local administrator or domain account with admin rights on this computer, open up the users and groups and edit the administrators group. You try to add a domain user to the group but when you hit add you get an access denied error even though you are an administrator on that computer.
Well after looking into this for a few days we started noticing that it was all student computers and we couldn’t find any teacher computers affected by it, so we started looking into GPO’s to see what could possibly do something like this. To make a long story short and easier to explain we found that installing one of our programs to block Internet on student computers was causing the issue. Apparently in order to block all http traffic they have an allow list of 9 windows program that are allowed to access the network, whether it is http traffic or not, and mmc.exe is not on that list of allowed apps. So after a quick phone call to the company we found the registry key we needed to push out and within a few minutes had this in a policy to start fixing all computers in the school.
Once I get a full wiki page on this at work I will post a more in-depth look into this issue, but for now this will just have to do.
I think all right thinking people in this country are sick and tired of being told that ordinary decent people are feed up in this country with being sick and tired. I’m certainly not, and I’m sick and tired of being told that I am.
