Re: Right & Permissions

Tech-Archive recommends: Fix windows errors by optimizing your registry

Howdie!

jase2001ny wrote:
i linked the domain controller policy to the ou i created. when i ran rsop.msc on the workstation i get "invalid namespace error". i have setup a user in AD and have them as a member of the admin group also and when i logon to the workstation with that user i do not have admin rights?? i was thinking that the two issues are tied in together somehow?? also when i run gpresult i get policy object does not exist. I might add i am new to all this so please bare with me here. the only time the admin rights do show for the user is when i logon to the server itself with that user id

The "Default Domain Controller Policy" is a predefined policy with security settings for DCs. Why would you wanna link it to a normal OU other than the Domain controllers OU? Just for testing?

The users you have -- are they members of the "Domain Admins" group? The machine you're logging in with those accounts - is it joined to the domain and DNS settings are correct? I somehow still don't get what your primary goal is here. What are you trying to test or set up with Group Policy? Maybe we can help you that way to get things started.

cheers,

Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
.

Relevant Pages

  • Re: Group Policy Editor
    ... don't want to let guests run in an admin account. ... If you mean *some* programs - group policy isn't where you do stuff ... Oh - and don't forget to complain to the product developers about ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Are there Group Policy Object Domain debug tools available?
    ... Yes, I have admin privileges. ... > add the workstation to domain? ... >> Is there a Group Policy tool that I can run in backgroud that will tell me ... >> exactly what Group Policy setting is causing a problem when I try something ...
    (microsoft.public.windows.server.active_directory)
  • Re: Screen lock out / power options problem when added to domain
    ... > There screen saver properties are disabled/strange. ... > the LAN password after 15 minutes and when the monitor shuts off. ... > If I log in locally (admin account) I can change the properties. ... > I looked for a group policy for this but can't find anything. ...
    (microsoft.public.win2000.active_directory)
  • group policy??
    ... I log 0n as admin and in the MMC dept. ... apply to default user permissions a lock out preventing ...
    (microsoft.public.win2000.security)
  • Re: error when trying to get a remote security policy... Please help!!!
    ... to get the security policy from, infact I have network admin access. ... getting the error "Failed to open Group Policy Object on... ... > onto the remote computer with an account that has admin credentials on the ...
    (microsoft.public.win2000.security)