Yesterday I promoted a brand new server with a fresh install of 2008 R2 to a domain controller. This would be the 5th DC in the domain and the second running 2008 R2.
Everything seemed to be fine. Later when I logged in I realized the domain admin account had no rights. I cannot open any of the AD snap ins or manage the server at all. All I get is Access Denied errors when I try to open anything up.
If I log in with a different account with domain admin rights it works fine.
I have never seen the domain admin account denied access to everything. If anyone has any ideas I would be greatful.
In the end I will probably just wipe it, but I would like to understand what happened first.