Group membership are not correct after logon

Tech-Archive recommends: Fix windows errors by optimizing your registry



Hi,

I have the next problem:
When a user logon on the domain the domain policies will not apply.

When I look on the user registry key I see only the Group memberships from
the mandatory profile and not from the groups from the domain.

At that moment the policies are not applied.

For example:

The both situation has the user the same settings.

User has the right memberships after logon

[HKEY_USERS\S-1-5-21-18828345-1324238023-441284377-1261\Software\Microsoft\Windows\CurrentVersion\Group Policy\GroupMembership]
"Group0"="S-1-5-21-18828345-1324238023-441284377-513"
"Group1"="S-1-1-0"
"Group2"="S-1-5-32-555"
"Group3"="S-1-5-32-545"
"Group4"="S-1-5-14"
"Group5"="S-1-5-4"
"Group6"="S-1-5-11"
"Group7"="S-1-5-15"
"Group8"="S-1-2-0"
"Group9"="S-1-5-21-18828345-1324238023-441284377-1013"
"Group10"="S-1-5-21-18828345-1324238023-441284377-1893"
"Count"=dword:0000000b


User has the wrong memberships after logon and you will see only the groups
from the mandatory profile.


[HKEY_USERS\S-1-5-21-18828345-1324238023-441284377-1261\Software\Microsoft\Windows\CurrentVersion\Group Policy\GroupMembership]
"Group0"="S-1-5-21-3438106890-2258791124-4107017515-513"
"Group1"="S-1-1-0"
"Group2"="S-1-5-32-545"
"Group3"="S-1-5-4"
"Group4"="S-1-5-11"
"Group5"="S-1-5-15"
"Group6"="S-1-2-0"
"Group7"="S-1-5-64-10"
"Count"=dword:00000008


Who can give me the solution?

Tanks,

Evert van der Meulen

.



Relevant Pages

  • Re: Turn Off User Logging (Event Log)
    ... only do "Failure" since hopefully most will successfully logon... ... I believe Domain policies will override the local policies though... ... My issue though is that I would like to turn off the event logging ...
    (microsoft.public.win2000.security)
  • Re: Strange Profile/Policy issue
    ... I work in a school district. ... We have over a hundred Dell Latitude D600 laptops running Windows XP ... All of the students in a class logon as ... that it will pick up the mandatory profile and/or policy. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Special privileges assigned to new logon??
    ... I have checked memberships. ... The rights I assume are associated with these ... Type 3 logon is a network logon such ... >>> for group membership to see if it was you expect. ...
    (microsoft.public.security)
  • Re: Registry Keep Changing
    ... Yeah, I think I've sorted it now, I've setup an AS400 logon script that runs ... they were all using the same mandatory profile it wasn't possible. ... > settings that have been saved in the profile when it was created. ... but if I log off then on again the registry is back to ...
    (microsoft.public.win2000.active_directory)
  • Re: Registry Keep Changing
    ... Yeah, I think I've sorted it now, I've setup an AS400 logon script that runs ... they were all using the same mandatory profile it wasn't possible. ... > settings that have been saved in the profile when it was created. ... but if I log off then on again the registry is back to ...
    (microsoft.public.windows.server.active_directory)