Windows 10: AD Domain Admin with missing rights?

Solution 1:

Look like it's a problem between 'User Account Control' and the 'Built-in Administrator' account. I had the same issue and this worked for me:

1. Win + R and type 'secpol.msc' for open the Local Security Policy console.
2. In the Security Settings tree, open Local Policies > Security Options.
3. Find the policy: User Account Control: Admin Approval Mode for the Built-in Administrator account and enable it.
4. Log out - log in, voilá!

Solution 2:

Just had this issue on a few computers I administer. In case it helps anyone:

1. PCs built from scratch with Windows 10 (education edition) using Lite Touch Installation from Windows server - the issue did not arise.

2. Some (but not all !?) PCs upgraded to Windows 10 (education edition) - exact same source media as used for the LTI build - from Windows 8.1 exhibited the problem. The only possible pattern I can see so far is that the PCs with the problem were the Surface Pro 2s - the ones that did not exhibit the problem were Surface Pro 3s - apart from driver / firmware etc. differences between the 2 types, the pre-upgrade builds on the 2 types were identical, so this feels very strange.

3. I also had a few upgrades from Windows 10 Pro that didn't have a problem, but all these were Surface Pro 3s and there weren't enough of them to add anything useful.

4. The English message is:

Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item.

5. Instead of using local security policy on individual machines, you can use domain group policy - same policy setting, under Computer Configuration / Policies / Windows Settings / Security Settings / Local Policies / Security Options - which seems to fix it.