Re: Policy Problem

From: Rick (rtifft_at_apexlending.com)
Date: 03/17/04


Date: Wed, 17 Mar 2004 08:59:31 -0800


>-----Original Message-----
>Rick, where is this particular user located? try move
this user to the same
>location in the directory as administrator and se if
that helps. If it dose
>there is a policy prevent the particular user from what
you said become a
>local administrator I'm not know exactly what you mean
here?
>
>Logged in as this particular user you can use the
command line based tool
>gpresult (built in at WindowsXP and Windows Server 2003)
to show applied
>policies.
>
>Download gpresult for Windows2000:
>http://www.microsoft.com/windows2000/techinfo/reskit/tool
s/existing/gpresult-o.asp
>
>How to Use the Group Policy Results (GPResult.exe):
>http://www.microsoft.com/windowsxp/pro/using/itpro/managi
ng/gpresults.asp
>
>--
>Regards
>Christoffer Andersson
>
>No email replies please - reply in the newsgroup
>
>"Rick" <rtifft@apexlending.com> skrev i meddelandet
>news:ed8e01c40c37$2a241980$a501280a@phx.gbl...
>> I am coming into this network new and don't know what
>> policies may have been set on the domain in the past. I
>> have a problem where I have a user that I created in
the
>> domain that I have put in the Domain Admins and
>> Enterprise Admins group. I also have put it in the
local
>> administrators group on a brand new Dell workstation
(XP
>> Pro) that I just bought.
>>
>> The problem is that the user does not have local admin
>> rights to either the new workstation or to any other
>> computer that is a member of the domain. If I log in
with
>> this user to a domain controller it also does not have
>> local admin rights.
>>
>> It seems as though there is some policy in place that
is
>> blocking the ability of any user other than the one and
>> only "Administrator" account to have local admin rights
>> on any domain computer. I have poured through all of
the
>> domain policies to try and find the setting but can't
>> seem to find anything that looks like it would cause
this
>> problem.
>>
>> Any suggestions as to what it may be would be greatly
>> appreciated.
>>
>> Thanks,
>> Rick
>>
>
>
>.
>Yes that was it, I didn't realize that my user was in an
OU that had a policy applied that restricted local admin
functionality. Thank you very much for your help.



Relevant Pages

  • Re: Policy Problem
    ... Rick, where is this particular user located? ... location in the directory as administrator and se if that helps. ... > The problem is that the user does not have local admin ... > only "Administrator" account to have local admin rights ...
    (microsoft.public.win2000.active_directory)
  • Re: Must all users be administrators?
    ... The familiar look of the AD objects tree you see in Group Policy Editor is ... This seems modestly confusing to an SBS Administrator because there's very ... those rights happen to be nearly unlimited. ... sit a workstation logged on as the Local Administrator, by default, there ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: Administrator unable to log on Interactively
    ... Firstly i tried accessing the domain controller C drive ... I think the policy has been changed in the "local security ... >> administrator is not able to log on interactively. ... >Interactive Logon setting takes precedence over the Allow ...
    (microsoft.public.win2000.security)
  • Re: Administrator is not the "Boss" on this machine.
    ... policy, I'd see two columns, one for "setting" ... > you can not run that command you may not be logged on as an administrator. ... > If you messed with Group Policy settings for user configuration the solution above ...
    (microsoft.public.win2000.security)