When you log on as the built-in Administrator account and open the MMC, you receive Access Denied?
When you start Active Directory Users and Computers, the Edit button is grayed out on the Group Policy tab in an Organization Units Properties.
This behavior will occur if all of the following are true:
- You upgraded a domain controller from Windows NT.
- Prior to upgrading, the Administrator account was removed from the Administrators group.
To fix this problem, add the Administrator account to the Administrators group using the Active Directory Users and Computers snap-in or net localgroup Administrators Administrator /ADD from a CMD prompt on the domain controller.