Re: Problems with user accounts

From: keesoft (keesoft_at_discussions.microsoft.com)
Date: 12/23/04 

Date: Wed, 22 Dec 2004 17:19:01 -0800

Thanks Dave!
On a test computer this looks like it will work just fine. However, during
the course of this fix I came about a new problem.

When I joined to the new domain (which was successful) I tried to logon
under the domain admin acoount. I received a message that I could not logon
locally. I have had this problem with one 2000 box in the past, but no XP
boxes seem affected. I solved the problem by creating a new folder in my AD
and giving it a GPO that allowed local logons and placed the computer account
in this folder.

I am going to assume that I will have more of this type of problem as I join
these accounts to the new domain. I cannot see any deny policies in place -
most are not enabled at all. Any clue why this is happening?

BTW, the client account is a domain user account that all 20 users in the
network will use to logon, but I can't logon as Admin either. I suppose I can
add all the W2K computers into the new folder with the GPO before I start to
join them.

I would also like to speed up the logon process after joining. Is there any
way to speed up the activation of the GPO in the AD?

"Dave Patrick" wrote:

> You can use the Copy To function to mirror the profile. Create the new
> account. Logon with the new account at least once. Then while logged on as
> another user (with administrative rights) Control Panel|System|User
> Profiles, select your olduser, Copy To, Browse to
> %systemdrive%\Documents and Settings\newuser
> Change "Permitted to use:" to "newuser" OK.
>
> --
> Regards,
>
> Dave Patrick ....Please no email replies - reply in newsgroup.
> Microsoft Certified Professional
> Microsoft MVP [Windows]
> http://www.microsoft.com/protect
>
> "keesoft" wrote:
> | Greetings all,
> |
> | My company is adding a suffix to the domain currently running on my W2K
> | server. The server is already configured and running fine for several
> months.
> | However, several of the users, a mix of 2000 Pro and XP, are still listed
> as
> | members of the old domain. When I try to join them to the new domain, the
> | preferences of their user acount changes back to the default settings. We
> | have 2 proprietory programs that currently run on the old user account
> fine,
> | but have to be completely reconfigured after joining them to the new
> domain.
> | They are a major pain.
> |
> | How can I keep the old settings from the previous user accounts and pass
> | them onto the new user account that Windows creates when I join the new
> | domain?
>
>
>

Relevant Pages

  • Re: GPO and Log on as a Service
    ... I had created a GPO as you described in step 4 and then tried linking it to both my domain (where I have the GPO to rename the admin account) and the domain controller under my domain. ... I was installing an updated version of some software under this user account, and the docs said to set the user to allow Logon as Service using the Local Security Policy, which SBS doesn't have. ...
    (microsoft.public.windows.server.sbs)
  • Re: logon to workstations
    ... Cary and Ryan, ... We are trying to using a single domain account to logon ... to logon to the training facility workstations through the Logon Workstations ... unless there is a setting in my user account properties ...
    (microsoft.public.win2000.active_directory)
  • Re: Problems with Domain Join for XPE FP2007
    ... If you logon to local account, are you able to get to domain resources using the same domain user account ... you can enable audit and logging on the server side and see why it is rejecting the client logon request. ... try to do a domain join, I'm getting various errors that prevent the ...
    (microsoft.public.windowsxp.embedded)
  • Re: Welcome Screen Gone
    ... Once you've setup automatic logon for your user account, ... with the Administrator account. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Problems with user accounts
    ... Deny log on locally ... | When I joined to the new domain I tried to logon ... | and giving it a GPO that allowed local logons and placed the computer ... the client account is a domain user account that all 20 users in the ...
    (microsoft.public.win2000.general)
Loading