problem with logon on a windows 2000 or XP client machine

Hi,

I have this weird problem.
I installed a computer with windows 2000 pro with SP4 and all updates
and hotfixes. Everything went well, but then disaster struck.
I joined this machine to a windows 2000 domain. The domain users are
member of the local users groups. My account is member of the local
administrator group.
When I log in with a domain user account on this machine, the screen
stays perfectly blue. There is no hard drive activity at all. When I
log out and log back in with my own domain account (which is member of
the local administrator group on the computer), I get my desktop and I
can change settings and install software. When I add the domain users
to the local administrators group and log in with a domain user
account, I also get the desktop and everything on it.

I also have the same problem when I do this on a Windows XP
workstation.

Please help, because it's driving me crazy. I don't want the domain
users to be local administrators. This messes up our whole security
policy!

.

Relevant Pages

  • Re: problem with logon on a windows 2000 or XP client machine
    ... member of the local users groups. ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • Re: Local Machine Rights in a Domain
    ... > machine's administrator group, sometimes it works, and sometimes it ... You should be able to add Domain Users or any domain group to the local ...
    (microsoft.public.windows.server.setup)
  • Re: problem with logon on a windows 2000 or XP client machine
    ... Did you change any permissions on these computers either locally or via ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • Re: Local Admin
    ... >Is it possible through Group Policy to add the 'domain Users' group to ... >the 'Local Administrators' group on all Windows XP Pro workstations in a ... Windows: General MVP ...
    (microsoft.public.windows.group_policy)
  • Local Admin
    ... Is it possible through Group Policy to add the 'domain Users' group to ... the 'Local Administrators' group on all Windows XP Pro workstations in a ...
    (microsoft.public.windows.group_policy)