Interactive login problems

Hello,

We are a small company that just got big enough to use active
directory. I installed windows server 2003 and have run into several
problems. Let me give you a breakdown on what I have done for user
organization:

I have two OU's right now, an administrator based OU and a Standard
User OU. The admin users have no extra domain policy on it, it just has
the base security settings defined at the domain level, (password
length, complexity, etc.) and then the Standard User OU has some more
restrictive settings on it, for instance not letting users run games,
movie maker, etc. The problem I am having is that all of my users HAVE
to be local administrators on their machines to login at all. If they
aren't they get an error that pops up saying something to the tune of
'local policy will not allow you to login interactively.' I really
don't want to have them as local administrators on their machines, but
I can't find any domain or local policy that isn't letting them login.
I have checked the local user group and domain users is listed in
there.

Number two is that no one can use the built in windows CD burning
software. I have alcohol 120% (for imaging the expensive software) and
tried nero (which worked fine). However if I put a blank CD in my tray
and double click on the cd burner in my computer I get the following
error:

D:\ is not accessible. Incorrect function

There are two solutions I can find online, uninstall or update roxio
(no one has this software) or turn on cd burning in the recording tab
under properties, there is no recording tab. I recently had to rebuild
a users computer, and he can burn still even after being joined to the
network, so I can only assume that it's not a domain policy I might
have turned on. The only other thing is that I haven't put our Symantec
corp edition scanner on his machine yet. I am going to put that on in a
few minutes here to see if that disables it, if so a nasty letter will
go do Symantec.

If anyone can help with this it would be greatly appreciated!

.

Relevant Pages

  • Re: Users Logon & Logoff Timings
    ... For 200 machines network should not be impacted due to auditing ... > If I will enable domain policy to record audit event, ... >>> I like Microsoft Newsgroups, ...
    (microsoft.public.win2000.security)
  • Group Policy Application Problems on Upgraded XP Pro Machines
    ... applying the security settings for my default domain policy. ... it is only happening on a few machines, ... machines that are experiencing this problem are were upgraded from 2000 to XP ...
    (microsoft.public.windowsxp.security_admin)
  • Most Frequently Used (MFU) list reset at login
    ... I have set Auditing on ... Running Windows XP Pro SP2. ... Machines belong to a Workgroup, not a Domain so there is no domain policy ...
    (microsoft.public.windowsxp.help_and_support)
  • Domain Security policy
    ... I made changes on the domain policy, but it does not apply to user pc when ... they login. ... i allowed change the system time for a specific user. ... administrator can change not the specific user. ...
    (microsoft.public.windows.server.active_directory)
  • RE: viewing asp pages from other machine
    ... Thanks, Yogita, I found the settings you mentioned and the IUSR account has been assigned these rights (Login on locally, etc.). ... I see from another thread that domain policy can override these local security policies, so I will check with the domain administrator and see if that may be the source of the problem. ...
    (microsoft.public.inetserver.iis)