We've brought up a 2008R2 domain in our lab, to simulate our production environment. The first user account created was my boss creating his account, setting it as a God account, with memberships in all the high level admin groups (Domain Admins, Enterprise Admins, etc.)
When he uses this account, he is unable to edit the default domain policy. The Edit button is grayed out. In his troubleshooting, he made a Copy of that account, and using that, he is able to edit GPOs. He hasn't been able to find anything about this on the internet, so I figured I'd come here and ask all you gurus out there. So has anyone else seen this issue? Is it just some weird "feature" of Server 2008 R2? Or is his account possibly corrupt somehow, even though it was just created? Thanks in advance for any ideas you guys may have. Joe Heaton ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
