Re: Policy Problem
From: Rick (rtifft_at_apexlending.com)
Date: 03/17/04
- Next message: Mykhaylo Khodorev: "Re: One of DCs problem"
- Previous message: Amila Chandrasekera: "One-way trust between Internal network and DMZ"
- In reply to: Chriss3: "Re: Policy Problem"
- Messages sorted by: [ date ] [ thread ]
Date: Wed, 17 Mar 2004 08:59:31 -0800
>-----Original Message-----
>Rick, where is this particular user located? try move
this user to the same
>location in the directory as administrator and se if
that helps. If it dose
>there is a policy prevent the particular user from what
you said become a
>local administrator I'm not know exactly what you mean
here?
>
>Logged in as this particular user you can use the
command line based tool
>gpresult (built in at WindowsXP and Windows Server 2003)
to show applied
>policies.
>
>Download gpresult for Windows2000:
>http://www.microsoft.com/windows2000/techinfo/reskit/tool
s/existing/gpresult-o.asp
>
>How to Use the Group Policy Results (GPResult.exe):
>http://www.microsoft.com/windowsxp/pro/using/itpro/managi
ng/gpresults.asp
>
>--
>Regards
>Christoffer Andersson
>
>No email replies please - reply in the newsgroup
>
>"Rick" <rtifft@apexlending.com> skrev i meddelandet
>news:ed8e01c40c37$2a241980$a501280a@phx.gbl...
>> I am coming into this network new and don't know what
>> policies may have been set on the domain in the past. I
>> have a problem where I have a user that I created in
the
>> domain that I have put in the Domain Admins and
>> Enterprise Admins group. I also have put it in the
local
>> administrators group on a brand new Dell workstation
(XP
>> Pro) that I just bought.
>>
>> The problem is that the user does not have local admin
>> rights to either the new workstation or to any other
>> computer that is a member of the domain. If I log in
with
>> this user to a domain controller it also does not have
>> local admin rights.
>>
>> It seems as though there is some policy in place that
is
>> blocking the ability of any user other than the one and
>> only "Administrator" account to have local admin rights
>> on any domain computer. I have poured through all of
the
>> domain policies to try and find the setting but can't
>> seem to find anything that looks like it would cause
this
>> problem.
>>
>> Any suggestions as to what it may be would be greatly
>> appreciated.
>>
>> Thanks,
>> Rick
>>
>
>
>.
>Yes that was it, I didn't realize that my user was in an
OU that had a policy applied that restricted local admin
functionality. Thank you very much for your help.
- Next message: Mykhaylo Khodorev: "Re: One of DCs problem"
- Previous message: Amila Chandrasekera: "One-way trust between Internal network and DMZ"
- In reply to: Chriss3: "Re: Policy Problem"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|