Re: access denied - IS THERE a definitive solution????

that's an excellent observation. Unfortunately, none of the local user
accounts were added while part of the domain... I only added a domain
user while joined.


I was suggesting that the local user account was corrupt (regardless of
when/how it was added) and recreating it from scratch may fix the issue.

Any way it sounds like you haven't found any solution.................so you
really don't have anything to loose.

hth
DDS

"Bob" <bobg.hahc@xxxxxxxxx> wrote in message
news:7abfeff5-b402-48cd-a929-e6d29f817807@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Danny;

TX so much for your reply..

that's an excellent observation. Unfortunately, none of the local user
accounts were added while part of the domain... I only added a domain
user while joined.

although probably 80% of all the materials I've read about this, don't
really relate to this situation; I did find a number of references
that seemed to indicate this is a known problem of some sort... but -
I sure can't find any definitive documents about it.

The part that's really ticking off, though, is that I DO authenticate
- I can even get denied authorization by using an incorrect username/
password. BUT in spite of being authenticated, and inspite of the
authenticated user having full admin rights; I get access denied when
I try to drill down into ANY component of the computer management MMC.

Any other ideas appreciated ! ;-)
Bob


On Aug 13, 10:33 am, "Danny Sanders" <DSand...@xxxxxxxxxxxxxxx> wrote:
Just a though but when the PC is in a workgroup the user you added has a
profile created. When the PC is in the domain the user has a different
profile.

I would test deleting the profile created for the user when in a
workgroup,
add the user again and log in and a new profile will be created. Then
test
access to the services.

hth
DDS

"Bob" <bobg.h...@xxxxxxxxx> wrote in message

news:6e510b82-51ac-48d2-89e0-da3364c43371@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

I have spent MY ENTIRE AFTERNOON trying to do the most simple of
things.

All I want to do, is use computer management mmc to connect to a
remote computer, and manage its services. That's it. Should be easy -
but not only is it NOT easy - I've read HUNDREDS of webpages/group
posts, and NO ONE seems to know how to fix it!!!!!!!

I'm trying to connect to a windows 2000 pc, configured as being in a
workgroup.
every other PC is part of our domain. I have added the user name I'm
logged into the domain with, as a LOCAL user to that pc in case wmi is
too stupid to figure out that I've already authenticated correctly.

I CAN connect to the PC (and authenticate) - but as soon as I try to
access services (or just about anything else) - I get "access denied".

HOW CAN ACCESS BE DENIED IF I JUST FREAKING AUTHENTICATED!?!?!?!?!?!

I have already checked dcomcnfg, and tried "default" and "connect"
properties.
I have already accessed wmi control \ security, and added every
fricking username I can think of, each with full access.

If I join this pc to the domain - I can access wmi - however - this pc
will NOT be remaining in the domain. IT MUST be managable as a
workgroup pc, and I see no reason this shouldn't be able to be done.

does ANYONE have ANY idea of what I could possibly be doing wrong??
TIA
Bob



.

Relevant Pages

  • Re: access denied - IS THERE a definitive solution????
    ... none of the local user ... The part that's really ticking off, though, is that I DO authenticate ... profile created. ... I would test deleting the profile created for the user when in a workgroup, ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Setting up Domain and local users to use same profile
    ... > I am working on a laptop using XP professional. ... > The PC is also set up with a local user with the same name ... How can I get both the accounts to use ... > use a local profile. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: I messed up with domains and account profiles
    ... The usual way of accessing another profile is to logon as an administrator ... > I took a PC out from its original domain (for which I dont ... > have a physical connection any more) and all accounts from ... > Im planning to erase the local user before re-inserting ...
    (microsoft.public.win2000.security)
  • I messed up with domains and account profiles
    ... I took a PC out from its original domain (for which I dont ... have a physical connection any more) and all accounts from ... profile to the "unknown" account directory and it seems to ... Im planning to erase the local user before re-inserting ...
    (microsoft.public.win2000.security)
  • Re: SID Hitory Not Working after ADMT 3 Migration
    ... As you said "Which is located on the user accounts profile tab", ... SID Hitory Not Working after ADMT 3 Migration ... Sid history via groups is working. ...
    (microsoft.public.windows.server.migration)
Loading