Using Computer Management for remote pc's
 

I have been connecting to remote pc's in our domain via computer management. I sometimes have to add their user accounts to the local admin groups and have found it easy to do it this way.

Since upgarding there pc's to XP sp2 i can still connect to there pc's via computer management (after a firewall tweak) but when i try and access the snap-ins like 'Users and Groups' or 'services' it says ACCESS DENIED.

I can still connect and use the snap-ins on the old win 2k pc's with no problem. What could be set on the XP machines that is stopping my access. I am a network Administrator and should have access everywhere.

'After a firewall tweak'

Try disabling the firewall and testing it.

David

tried that, still the same

by network administrator do you mean domain admin rights?

can you access the hard drive by \\compname\c$?

can you remote desktop via the computer name/ip address

this is a long shot but do you use security groups in the local admins of the machine that give certain people admin rights like PC-Support for example. If you have basic user rights you could still access the machine via a snap in but couldnt make any changes, hence my group question.

by firewall tweak i take it you put file and printer sharing in the exceptions

the firewall is set to block remote administration tools by default - we edit our group policy within AD to allow certain sub-nets (the admin one) access to remote admin.

The firewall is disabled

checked local machine policies?

SP2 disables ActiveX controls by default. MMC.EXE uses ActiveX controls so you will have to change the policies to allow the use of ActiveX.

ok strange as this may seem it appears to be a DNS problem. In DNS i have multiple entries for pc's and some ip addresses that machines have, in DNS they are linked to our server. Any idea why DNS is doing this.