Re: Request Help: I lost privileges after changing Network ID to a Workgroup from a domain, even though I'm in the Local Admin group

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 05/21/03


Date: Tue, 20 May 2003 20:24:31 -0700


I always make sure that I (occassionally) use a local account,
rather than only using a domain account. This way, I do not
have surprises since the local account will survive domain
changes (with only impacts from AD applied group policy
while in the domain).

"Dan Gewirtz" <Dan@CreativeAsync.net> wrote in message
news:eDfLPczHDHA.336@tk2msftngp13.phx.gbl...
> Phil,
>
> Logging in as administrator worked. You are like a God. If you are ever
in
> Wash DC email me and I'll immediately buy you lunch.
> This is what I think happened: I have been reading Linux For Dummies and
I
> was being punished. I have always assumed
> that when you disjoin from a domain you can continue to use the same
account
> without negative consequence to local privileges.
> I guess I will now assume--when disjoining an existing account from a
> domain, or when changing domains--that changing to a new account is a
good
> practice.
>
> Thank you again.
>
> Dan Gewirtz
> invresdg@ix.netcom.com
>
>
> "Philip Nunn" <philipnunn@yahoo.com> wrote in message
> news:uVqWwqxHDHA.1720@TK2MSFTNGP11.phx.gbl...
> > I doubt its a GP problem. When you disjoin from a domain, Windows
> > automatically takes the Group Policy that was in effect before you
joined
> in
> > the first place and re-applys it to your pc. You probably need to login
> > with a "local" account. Since you disjoined from the domain it cant
match
> > the SID with an account anymore. Try to login as the local
> "administrator"
> > account and see what happens.
> >
> > Phil
> >
> > "Dan Gewirtz" <Dan@CreativeAsync.net> wrote in message
> > news:e7uMhlxHDHA.2000@TK2MSFTNGP10.phx.gbl...
> > > After changing the network ID from a domain to a workgroup, and
> rebooting
> > > (and then for the first time logging in to a
> > > login box without a domain-name selection list), I am no longer able
to
> > > control various basic settings: the task bar will not unlock;
> > > I cannot change Advanced Settings in the Folder Options applet; other
> > > Settings I successfully configure are not retained between logins;
> > > I receive 'Access Denied' message when I try to open the Group Policy
> > > applet.
> > >
> > > (Background: I am no longer on a domain-based network-- the domain
> login
> > > was a residue of a long-ago user-account setup,
> > > but I had been logging into the defunct domain in the login screen
until
> I
> > > changed the Network ID from Domain 'Develop' to Workgroup 'Workgroup'.
> > > My user is still in the Administrators local group and any new Admin
> > users
> > > I try to set up suffer the same behavior. The machine is a laptop
> > > running XP Pro SP 1--originally a W2k installation that was upgraded
> > without
> > > incident.)
> > >
> > > I suspect my problem is something basic related to Group Policy but I
> > > obviously don't know anything about Group Policy.
> > > Can anyone give me pointers on what the problem might be, or on which
> > things
> > > I should investigate?
> > >
> > > Thank you in advance for any help.
> > >
> > > Dan Gewirtz
> > > invresdg@ix.netcom.com
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: Logging on to workgroups
    ... >>into it with a domain account. ... > local account. ... >>user accounts. ... You can login. ...
    (microsoft.public.win2000.security)
  • VS.NET Create Web Application Hang
    ... We even created a local account for him to ... That local account allows him to create a web app, ... and created with the user as a Domain Admin. ...
    (microsoft.public.dotnet.general)
  • Re: Could not receive email, until user account was established
    ... Once I deleted that other person, and I entered our employees name into the user account, his mail worked right away. ... If they cannot login, they also don't get to run any applications, like Outlook. ... You mention that the user is loggin on under a domain account. ... Then you mention creating a local account by the same *username* as the one they use when logging in under the domain. ...
    (microsoft.public.outlook)
  • Re: PLEASE HELP - USENET/Proxy Security Question
    ... And it appears, for the most part, that the MS Proxy is really the only ... I needed to gain access to the administrator account on my box so I set the ... this local account, I pointed everything to the proxy and it worked. ... What is different when reporting connections ...
    (alt.computer.security)
  • Re: Profiles and Outlook Exchange Connection Problems
    ... and Exchange doesn't know anything about the local account. ... profile has never worked anyway, I'd delete the user's Mail profile from the ...
    (microsoft.public.windows.server.sbs)