Re: Default User Profile Locks Down Admin!

If I did not misread what you said, you are doing this just backwards from
what I do.

I set everything up as I need it in the local administrator profile, then
log on as a domain admin and copy the administrator profile to the default
user profile.

You are creating administrator profiles from user accounts that have lower
priviledges and therefore you are getting access restrictions.

Try creating profiles from the top down instead for from the bottom up.

"Matt Callaghan" <MattCallaghan@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:59DE7E02-AC4D-422B-82C1-32EDA1416FFE@xxxxxxxxxxxxxxxx
> Hey everyone...I've got a strange problem/question.
>
> Here's the situation.
>
> We're on a Domain "X".
> Setting up a machine with Windows XP Pro SP2 for an Image. OK.
> Everything is about ready to go (Before we SysPrep, and create the image
> for
> it), so we begin creating the default user profile.
>
> NOTE: The Domain has user accounts seperated by "users" and
> "administrators".
>
> Creating the Default User Profile:
> Login as a "user" account. Setup everything we need (Drive Mappings,
> Shortcuts, etc etc.). Logout.
> Login as an "admin" account. Delete the current default user profile, and
> re-create using the previous login. Correct.
>
> Now, whenever an ADMIN logs in to this machine, and if that admin's
> profile
> is created from the default user profile, the admin is locked down!!!
> It's
> as if the default user profile is over-riding priviledge settings from the
> domain!
> (For an example, when an admin who's profile was created from the default
> profile attemps to use "Add/Remove Programs", that admin will receive the
> error that a USER would normally receive: "Add or Remove Programs has been
> restricted. Please check with your Administrator".
>
> Any ideas how to stop this "Priviledge Over-ride" from happening?...or
> what
> we could have done to CAUSE it to happen?
>
> (We've built several other images, and this has never happened before)
>
> We'll probobally just rebuild this one image that is giving us troubles,
> but
> we're interested to know WHY it happened.
>
> Thanks!


.

Relevant Pages

  • Re: Default User Profile Locks Down Admin!
    ... We do not usually give Admin rights locally for our "users". ... "user base" Admin rights only for building the default user profile. ... and thus restrict any LAN Admin who might login...) ...
    (microsoft.public.windowsxp.network_web)
  • Re: The Data file mailbox "user" was not closed properly.
    ... >> Due virus my user profile was corrupted. ... When I tried to login to my ... >> to laptop so I removed my profile from Document setting and when I ... > Did you/your admin entirely remove your old user profile from Windows (in ...
    (microsoft.public.office.misc)
  • Re: Managing User Profiles With Group Policies
    ... applied to both user profile and the machine. ... When I am logged in as admin, ... >> down by group policies logged in as an administrator? ... >> UserA is locked down using group policies from a Windows ...
    (microsoft.public.windowsxp.security_admin)
  • Default User Profile Locks Down Admin!
    ... so we begin creating the default user profile. ... Login as an "admin" account. ... profile attemps to use "Add/Remove Programs", ...
    (microsoft.public.windowsxp.network_web)
  • Re: Default User Profile Locks Down Admin!
    ... If we create the default user profile top ... Every other LAN Admin, including myself, builds the ... and thus restrict any LAN Admin who might login...) ... > log on as a domain admin and copy the administrator profile to the default ...
    (microsoft.public.windowsxp.network_web)