Re: Local admin accounts gone haywire

Hi Florian

Ok, i added back the restrictive group... i created the group
builtin/administrators and made the administrator and domain admins
members of the group.

Our domain is called reach.local, when i originally created the
restricted group for tech i'm sure i only created it for the tech
organisational unit but i've created the above restricted group at the
domain level (the default domain policy for reach.local). Could this
have something to do with the problem? I assumed that the default
domain policy would overwrite a policy further in the domain tree.

Here's a snippet from the winlogon.log

----Configuration engine is initialized successfully.----

----Reading Configuration template info...


----Configure User Rights...
Configure S-1-5-32-544.
Configure S-1-5-32-551.
Configure Power Users.
Error 1332: No mapping between account names and security IDs was done.
Cannot find Power Users.
Configure S-1-5-32-545.
Configure S-1-1-0.
Configure S-1-5-6.
Configure S-1-5-21-1993962763-1897051121-839522115-1000.
Configure S-1-5-21-1993962763-1897051121-839522115-501.

User Rights configuration completed with error.


----Configure Group Membership...
Configure Administrators.

Group Membership configuration completed successfully.


I appreciate your help florian

if u email me at kym@xxxxxxxxxxxxx, i'll email you the log if it helps

.

Relevant Pages

  • Re: Question on User Accounts
    ... It's fine to keep them as members of both. ... and Administrator to also be shown as users. ... > account in order to run some older applications. ... > them from the User's Group so they are only members of the Power Users ...
    (microsoft.public.windowsxp.general)
  • Re: RWW - Connecting to Desktop at work.
    ... They need to be members of the local administrator group, ... Microsoft MVPs ... Some Power users are not able to log on to their ...
    (microsoft.public.windows.server.sbs)
  • Re: power users not available after upgrade to xp pro from xp home
    ... administrator or power user. ... If an account on a system running XP Professional is a member of the Power Users ... If you want any of the accounts on your computer to be members of the Power ...
    (microsoft.public.windowsxp.general)
  • Re: power users not available after upgrade to xp pro from xp home
    ... The User Accounts applet in Control Panel is a basic tool that works the same in ... If an account on a system running XP Professional is a member of the Power Users ... If you want any of the accounts on your computer to be members of the Power ... show power users instead of just the limited and administrator? ...
    (microsoft.public.windowsxp.general)
  • Re: ADMINISTRATOR vs Administrator USer
    ... these be designated as administrator or how do I define one ... If a user is a member of the "administrators" group - no matter their other ... Power Users is supposed to be a group that can install certain things, ...
    (microsoft.public.windowsxp.general)