Re: This operation has been canceled due to restrictions in effect on this computer. When Logging in. Win 2k

From: Darren Mar-Elia (dmanonymous_at_discussions.microsoft.com)
Date: 10/02/04

  • Next message: Mike: "Re: Administrative Template Issue"
    Date: Fri, 1 Oct 2004 20:13:38 -0700
    
    

    Its likely some GP setting that is having an adverse affect on some
    application (yes, obvious, I know!). In the past, what I've done with these
    is use Regmon from www.sysinternals.com to try and locate the problem. Best
    bet is to enable it to run at logon and trace all registry requests. Then,
    stop the logging after the "cancelled" message appears and do a search on
    the log for the keyword "policies". Using this, you can locate all the
    policy settings that are being hit and maybe narrow down the search. What I
    have found is that policies like Hide Drives can have unexpected results on
    older apps so that would be the first place I would look.

    -- 
    Darren Mar-Elia
    MS-MVP-Windows Server--Group Policy
    Check out http://www.gpoguy.com -- The Windows Group Policy Information Hub:
    FAQs, Whitepapers and Utilities for all things Group Policy-related
    "bullwinkel J. Moose" <quincey.nyc@verizon.net> wrote in message 
    news:Oy$2BqCqEHA.2456@TK2MSFTNGP10.phx.gbl...
    >I have exactly the same problem and have been unable to get any help in 
    >some of the newsgroups I hope you have better luck. Meanwhile I am locked 
    >out of 3 logical drives but by changing user to another it works fine. All 
    >have administrator privileges.
    >
    > Good luck to us both.
    >
    > "Paula" <pfryar@pcconsulting.us> wrote in message 
    > news:412b7371.0409250828.45a50c12@posting.google.com...
    >>I am running a Windows 2000 server and all Windows 2000 Pro. machines.
    >> I have group polices setup on the server and roaming profiles setup.
    >> I have a few machines that when any user log in they get "This
    >> operation has been canceled due to restrictions in effect on this
    >> computer.  Please contactact your system
    >> administrator."  When I log on as administrator everything is fine.
    >> If I disable the group policy and login as a user it works fine.
    >> Nothing starts up oout of the ordnary.  I have checked my start up
    >> folder, my registry for the local computer and the current user and
    >> also the user for anything that is trying to startup.  This is only
    >> happening on a few computers, other computers get no error messages
    >> when starting up.  If I click on on the error things run and work just
    >> fine but I can't figure out why it is trying to startup.  For the
    >> group plicy I have just about everything controlled by the policy,
    >> this is at a school and students are using them so they wanted things
    >> locked down as much as possible.  Any insit as to why this would
    >> happen and where to look on what is trying to startup.  The only
    >> things that are starting up on the computers is Symantec Corporate and
    >> CyberSitter.  These are the same things starting on all the other
    >> computers.  Thank you.
    >
    > 
    

  • Next message: Mike: "Re: Administrative Template Issue"

    Relevant Pages

    • Re: Domain Users to have Local Admin rights
      ... Group Policy because a new policy doesn't wana work. ... to local Administrator group on all the computers. ... We have various admin accounts other then administrator ...
      (microsoft.public.windows.server.security)
    • Re: access denied error when opening gpedit.msc
      ... If you configured Group Policy to prevent users from accessing MMC, ... possible that you did not filter the administrators group assuming you are talking ... If these computers are in an OU other than the domain ... I am logged on with an Administrator account. ...
      (microsoft.public.win2000.security)
    • Re: debugger user autochange
      ... One possibility could be that Group Policy Restricted Groups are being ... applied to the computers in question. ... I think I failed to convey the problem clearly - the user accounts ... domain/userxyz assigned to the administrator group. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: EventID 1054 from Userenv for startup script
      ... Did you configure the mentioned policy for the XP computers? ... startup script currently does not have Authenticated Users in its ACL. ... It obviously gets group policy ...
      (microsoft.public.windows.group_policy)
    • Re: This operation has been canceled due to restrictions in effect on this computer. When Logging i
      ... administrator privileges. ... Good luck to us both. ... > happening on a few computers, other computers get no error messages ... > fine but I can't figure out why it is trying to startup. ...
      (microsoft.public.windows.group_policy)