Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have created some domain users in ADUC and added them to the "Domain Admins" group.

On a domain server when I try run a batch file that restart some services, with "net stop ", "net start " and "taskkill ", I get the following error message:

System error 5 has occured.
Access id denied.

And if I try to run the batch file with "Run as administrator" I get the following error message: "This file does not have a program associated with it for performing this action..."

It only works if I open an new cmd as administrator and rund the batch script from there.

What rights do my domain admins account lack?

share|improve this question

2 Answers 2

This doesn't look like a particular rights issue, but one that is caused by design by the use of UAC (User Account Control). All accounts except the default "Administrator" account will only have normal user privileges unless the program is elevated (using as you mentioned the "Run as administrator" option).

As for the "...does not have a program associated..." error this sounds like a registry issue based on looking at this article, though that refers to .exe files. On my install, there is *no key for .bat or .cmd in the registry path mentioned, which is:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts

It may be worth checking if there is on your install which could be interfering.

share|improve this answer
    
Thanks, I tested your tips and the registry tips from this discussion link. But, no, it will not work. –  monmon Dec 10 '12 at 15:29

I have solved it by disabling UAC(User Account Control) on the servers. But I also know it is not a "Best Practice" solution, if we have security in mind.

Maybe the best is to use GPO to disable UAC for the administrators on the servers.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.