Re: Your account is configured tp prevent you from using this computer
From: David Adner (davidadner_at_yahoo.com)
Date: 03/02/04
- Next message: marvyone: "Re: Firewall- is it creating problems"
- Previous message: David Adner: "Re: Cached Credentials for Service Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Mon, 01 Mar 2004 21:51:24 -0600
Did you check and verify the User Rights are still setup correctly and
that the users getting the error are in the appropriate groups? Does it
happen to specific users or computers? Once it happens, does it
"correct" itself or do you have to reapply your security template each
time? The error itself is a User Rights issue typically, so I would
check there first.
Mike Lizotte wrote:
>
> Hello All,
>
> Error "Your account is configured tp prevent you from
> using this computer"
>
> I have over 300 PC deployed using Windows 2000. There is
> no domain. I have implemented C2 security. All PC are
> running as workgroups with a database of 3500 local user
> accounts. All users belong to the user's group and are
> required to authenticate when logging onto the PC
> locally. In past three years this was never a problem.
> It only became a problem when I moved my image onto new
> computers as part of techroll. I had to detect new
> hardware, updated many software programs to the later
> versions. I also updated the windows 2000 from the
> Microsoft windows update site to the latest security
> patches & service packs SP4.
>
> Now I randomly receive the above error. All users are
> prevented from logging on, but administrators are OK. The
> event logs are not full, in particular the security logs
> are not an issue. I have read Microsoft articles on
> crashonaudit fail...not the issue here. Alot of articles
> are in reference to AD or a domain, again not applicable
> here.
>
> The event viewer shows no significant events have occurred
> in leading up to the problem.
>
> I started my deployment Jan 15, 2004 and since then many
> sites have not had a problem yet, however 6 different
> locations have, with some occurring multiple times over a
> 6 week period.
>
> The temporary fix is to re-apply the local machine
> security log. C:\secedit /refreshpolicy
> machine_policy /enforce, followed by a required reboot of
> the PC. Refreshing the policy without the reboot will not
> work. I tried to run the cmd string in a bat file under
> the local machine startup policy without success, even
> when followed with a reboot. I had to do the cmd manually
> and then reboot.
>
> I noticed a user in google groups that had the same
> problem with his home PC. This person indicated that they
> had a response from Microsoft. Microsoft said they think
> it might be one of their recent updates that caused this.
> They suggested to role back some of the updates.
>
> Since I am using the "Automatic Updates" feature at these
> remote sites, I don't see how this would be an option.
>
> Does anyone at Microsoft know a fix for this.
>
> I have a high level of knowledge on windows 2000. I have
> not finished my own investigation but thought I should
> ask, in hopes of speeding up a resolution.
>
> Comments appreciated...
- Next message: marvyone: "Re: Firewall- is it creating problems"
- Previous message: David Adner: "Re: Cached Credentials for Service Accounts"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|