can't login as domain user on XP without Domain Users in Local Adm

From: Jesse C (JesseC_at_discussions.microsoft.com)
Date: 06/23/05 

Date: Thu, 23 Jun 2005 10:26:02 -0700

Can somebody give me an idea of where I should look to fix this? The problem
is currently Domain Users are added to the Administrators group on the local
XP Pro SP 2 workstation and we would like to remove them and have them from
from the Local Users group. However, when I do this if we try to logon a
domain users to the domain on the workstation, it says that the user is not
allowed to log on interactively and refuses logon.

I've checked the domain controller policy and domain policy to make sure
they are not added to the disallow local logon entry.

This is a Windows Standard 2003 SP1 server.

Relevant Pages

  • Re: Computer Management Security Problem
    ... Check:To view a user's group membership for a domain, use the resource kit utility Showgrps.exe.. ... Users group to the Administrators group? ... either using the Default Domain GPO or a GPO at the domain level to ... By using a GPO at the domain level and specifying that Domain Users are ...
    (microsoft.public.win2000.security)
  • Re: Logon Script
    ... Administrators group to let all domain users automatically be local admins when they log on to a computer interactively. ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.scripting.vbscript)
  • Re: Domain Users
    ... Where do I find the Machine Administrators group? ... Our computers are joined to the domain and we let domain users to logon ... they are not able to run windows updates or install software. ...
    (microsoft.public.windows.group_policy)
  • Re: cant see AD users or groups
    ... I just do not understand why so many people continue to use the DNS Servers ... but when attempting to add domain users to the ... administrators group on the clients computer I can only see local ... I hadn't pointed DNS towards the server. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Give Domain Users Local Admin Rights
    ... >> I added DOMAIN USERS to the local administrators group ... >> How can I grant Local Admin rights to just the PC they ... >> are logged on to without giving them Local Admin ...
    (microsoft.public.windowsxp.security_admin)