Re: Right & Permissions

i linked the domain controller policy to the ou i created. when i ran
rsop.msc on the workstation i get "invalid namespace error". i have setup a
user in AD and have them as a member of the admin group also and when i logon
to the workstation with that user i do not have admin rights?? i was thinking
that the two issues are tied in together somehow?? also when i run gpresult i
get policy object does not exist. I might add i am new to all this so please
bare with me here. the only time the admin rights do show for the user is
when i logon to the server itself with that user id

"Florian Frommherz [MVP]" wrote:

Howdie!

jase2001ny wrote:
Preparing for MCSE and I have a Win 2003 server setup as DC and currently
have one workstation running XP. when logon with a user at workstation
everything that i have set seems to trans thru except rights and permissions.
when i logon to the server with the id the rights and permission are present.
i have looked at thd dns dns and tested it and the pc and sites are being
resolved. when i do a gpresult tho from the workstation i get policy object
does not exist.. i am assuming that may be part of my problem.. I am stumped.
users authenticate but permission and rights not passed?? replication
possibly?? PLEASE help

I'm not sure I can follow. You configured security settings in a domain
Group Policy? When do they work and when is there an error? Can you
confirm that the policies are applied (rsop.msc)?

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste

.

Relevant Pages

  • Re: Interactive Logon to DC
    ... Open the Local Policies snap-in (Programs/Administrator ... items under Local Policies/User Rights Assignment ... Deny logon locally ... Pay close attention to the Effective Policy Setting column. ...
    (microsoft.public.win2000.security)
  • Re: Why allow log on locally" is not configured by default??
    ... To logon locally you would have to be sitting in front of the console or use ... There are two policy under admin tools -> domain controller security ... Domain Controller policy impacts ALL dc's in your network. ... asking it if it is ok that this user log onto this workstation, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Right & Permissions
    ... when logon with a user at workstation everything that i have set seems to trans thru except rights and permissions. ... when i logon to the server with the id the rights and permission are present. ...
    (microsoft.public.windows.group_policy)
  • Re: Log on the domain
    ... if you set this policy the user will not be able to logon to the ... workstation at all. ... > world's premier event for IT and network security experts. ...
    (Security-Basics)
  • Re: Group policy
    ... I guess it's referring to giving someone that permission to "add workstation ... to domain" but not actually giving them rights on that container. ... I think this is a policy where you define the groups that can do it. ...
    (microsoft.public.windows.server.active_directory)