Re: problem with logon on a windows 2000 or XP client machine

I forgot to add that also verify that the users show as members of the users
group on the computer as I have seen similar behavior if they somehow became
removed from it. --- Steve


"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%23auUW5WOGHA.3260@xxxxxxxxxxxxxxxxxxxxxxx
Did you change any permissions on these computers either locally or via
Group Policy - filesystem? It certainly sounds like a permission problem
of some sort. Take a look at the logs via Event Viewer to see if anything
is recorded that may be of help and verify that users have
read/list/execute permissions to the root folder for the system drive, the
documents and settings folder, and the \winnt or \windows folder. Also
make sure there are no deny permissions for any groups on those folders
that may also include the user. If that does not help what I would try on
one computer is to use secedit as described in the KB article below to
reset security settings to default defined levels and append the command
with areas /filestore so that only NTFS permissions are restored. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222



"lightframe" <pascal.herms@xxxxxxxxxx> wrote in message
news:1140785885.198882.270400@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I have this weird problem.
I installed a computer with windows 2000 pro with SP4 and all updates
and hotfixes. Everything went well, but then disaster struck.
I joined this machine to a windows 2000 domain. The domain users are
member of the local users groups. My account is member of the local
administrator group.
When I log in with a domain user account on this machine, the screen
stays perfectly blue. There is no hard drive activity at all. When I
log out and log back in with my own domain account (which is member of
the local administrator group on the computer), I get my desktop and I
can change settings and install software. When I add the domain users
to the local administrators group and log in with a domain user
account, I also get the desktop and everything on it.

I also have the same problem when I do this on a Windows XP
workstation.

Please help, because it's driving me crazy. I don't want the domain
users to be local administrators. This messes up our whole security
policy!





.

Relevant Pages

  • Re: Please help with folder permissions
    ... All the domain users are a member of the local administrators group. ... If I remove domain users from local administrators it all works fine! ... The user becomes the owner not the local admin group. ...
    (microsoft.public.win2000.security)
  • Re: How2: User Rights on Domain but Admin Rights on Computer
    ... You can add domain users to the local Administrators group with ... Mathworks MATLAB for example install their services. ... able to run it even if he is just a member of domain users group. ...
    (microsoft.public.windows.server.security)
  • Re: problem with logon on a windows 2000 or XP client machine
    ... Did you change any permissions on these computers either locally or via ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • problem with logon on a windows 2000 or XP client machine
    ... I joined this machine to a windows 2000 domain. ... the local administrator group on the computer), I get my desktop and I ... When I add the domain users ... to the local administrators group and log in with a domain user ...
    (microsoft.public.win2000.security)
  • Re: Login Script
    ... > If userA is a member of DOMAIN USERS and is a LOCAL ADMINISTRATOR to ... >>> a helpdesk person) to not be a member of "Domain Admins", ... LOCAL ADMINISTRATORS group with below code in FIGURE 1, ...
    (microsoft.public.win2000.active_directory)