AD to desktop Permissions problem

Hello,

I am not a Windows server guru by any means; I was thrown into this
position and had to play the "figure out yourself game for six months
now" I am at a school that has AD setup and has two groups of
users...students and faculty....both are just set up as domain users
and users. The problem I have is a strange one...One of the technical
assistants had to reinstall Windows on the hard drive of a previously
crashed computer. She joined the computer to the domain using the
admin account; and installed all of the programs necessary for the
faculty member to have. The problem is, when the faculty member logs
in and tries to run her programs, it says she does not have sufficient
rights to do so. Before her hard drive crashed, she did not have any
special privileges that would give her any extra authority to run
stuff on her machine. Her account is setup just as all of the faculty
members are setup and none of the other members have trouble running
their programs...I even deleted her account and copied one of the
other members accounts so that everything was identical; Still no
success; she cannot run any of her programs on her local machine
without getting the message of insufficient privileges...Temporarily,
I made her a member of the Domain Admins group to circumvent this, but
this is not how I want things to be set up...(security nightmare)...So
based off of the info, is there anyone that knows where I can look to
fix this issue?

Thank you in advance for your time.

.

Relevant Pages

  • Re: Share Permissions and Security Groups
    ... >> storage on a member server. ... >> If the account is in no group that directly or indirectly has been ... >> resources that are controlled and add the groups of principals ... > From your comments I ensure that each Project Folder NTFS does not inherit ...
    (microsoft.public.security)
  • mssbsssr/sbsmonacct causing audit failure
    ... it first checks if the user account sbsmonacct exists, ... It is a member of Domain Users, Enterprise Admins, and by implication Users ... a member of either the Remote Operators group or the Domain Power Users ... This happens because on SBS 2003, the "Deny log on locally" policy ...
    (microsoft.public.windows.server.sbs)
  • User cant access OWA or RWW
    ... New staff member aboard; heading out on a business trip so I'm walking her through the process of accessing her email and desktop remotely. ... Keeps getting the note that either her login or password are bad. ... I then used the Add User wizard in Server Management to create a new account for her. ... User not allowed to logon at this computer ...
    (microsoft.public.windows.server.active_directory)
  • Re: Unable to unlock peer group members accounts
    ... Roger, Steven, thanks both of you for your valuable input which do help us in further troubleshoot our Unlock User account issue. ... In other words, if you have peer group member users but they reside in different OUs, then make sure you delegate to each Ou respectively with the required delegated group memebership. ...
    (microsoft.public.win2000.security)
  • Re: "Edit Users..." Menu Item Disabled in Telephony Management Sna
    ... To make it clear i used account that is member of domain admins and group ... I set up also the account (already member of domain admins and trough this ... Running "tapicfg show" revealed that I had no Active Directory TAPI ...
    (microsoft.public.win32.programmer.tapi)