Why is there no access to remote management tools for a domain computer under domain administrator rights?

Question

Active Directory

There is one machine in the domain on which I cannot access computer management through the ADUC snap-in.
No access to services (writes access denied). I wanted to see if the domain admins group is not included in the local admins group of the computer, but the tab local users and groups does not display anything. Shared folders are not displayed either. Accordingly, I cannot access the administrative spheres over the network. At the same time, I have the rights of a domain administrator. The problem is that you need to remotely install the program on this PC without affecting the user himself (without physical access), which I can’t do because of access rights denied. There is a possibility that the control ban was made by someone through politics, but I do not know how to find out. Tell me how you can fix this problem, where to "dig"?

Answer 1

Come with your feet, take the computer out of the domain, reset its entry in the domain, bring it back. Naturally, check the user profile settings. In addition, domain policies prohibit users from being local administrators in order to avoid a recurrence of this situation.