Access Denied with Domain Controller endpoint

[jmesa772]

Whether I explicitly add Domain Admins group in the RunAsVirtualAccountsGroups parameter or not it seems that I am not being given domain access right when running cmdlets like New-ADusers or New-ADComputer

Whether to run this session configuration as the machine's (virtual) administrator account

RunAsVirtualAccount = $true

RunAsVirtualAccountGroups = 'mesa\Domain Admins'

Access is denied
+ CategoryInfo : PermissionDenied: (CN=jeauser2,CN=Users,DC=mesa,DC=internal:String) [New-ADUser], Unauth
orizedAccessException
+ FullyQualifiedErrorId : ActiveDirectoryCmdlet:System.UnauthorizedAccessException,Microsoft.ActiveDirectory.Manag
ement.Commands.NewADUser

[rpsqrd]

Hi @jmesa772 -- can you confirm the OS and patch level of your DC?

[jmesa772]

Major Minor Build Revision

---

10 0 14393 0