Re: XP Pro user in domain can not run software locally

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 09/08/03


Date: Sun, 7 Sep 2003 20:31:51 -0700


"Hans" <kopya2000@yahoo.com> wrote in message
news:408401c37590$12003610$a601280a@phx.gbl...
> Just installed a new Winxp pro and got it connected to
> the domain. But now when I login to the domain, I can
> not run all the program anymore, it is telling me that I
> don't have enough security access or error because it
> needs to install some component and I don't have enough
> security.
> I can login locally to the computer and run anything but
> have problem only when logging in to the Domain.
> We run win2k server w. active dir.
> I even tried moving it to local workgroup and then change
> the setup again by joining the domain and still have the
> same problem.
> How do I give my domain user admin or power user access
> to the local pc. I tried logging in as Administrator and
> give the domain user admin access but will not go through.
>
> Thank You
>

If you can run apps as a plain limited/restricted user
account that is local to the machine, then you should
only need to make sure that the domain account, or the
Domain Users group is a member of your local Users
group in order to run all the same applications.

If your local account that can run these apps must be
a Power Users or Administrators group member, then
the same will be needed for the domain account.

If when logged in as an administrator you are unable to
add members to these groups then either
1. your machine is not using the correct DNS servers
   and only those servers
or
2. the domain is preventing these local groups from
    being changed through application of restricted groups
    from Active Directory based GPOs.
or
3. the machine is not really joined to the domain although
    it appears to be.

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA


Relevant Pages

  • Re: SPS2003 on DC
    ... If the account is a member of the Local Administrators group, ... you can install SPS 2003 on a DC but be aware that you have to install ... > I gave him a domain account, which is also member of the ...
    (microsoft.public.sharepoint.portalserver)
  • Re: Domain users unable to print to parralel printer
    ... Additionally I have disabled the logon scripts that maps drive automatically upon domain users login but did not help to fix the problem. ... I don't understand why a new created domain account with the same privileges as the existing users can print. ... Did you configure the printer as "Default printer" after installing with the administrator account? ... workstations and we encounter a very strange problem which we can't ...
    (microsoft.public.windows.server.networking)
  • Re: Domain users unable to print to parralel printer
    ... workstations and we encounter a very strange problem which we can't ... The printer will only print if we login as the Administrator ... when user uses their domain account to login they are unable ...
    (microsoft.public.windows.server.networking)
  • Re: Problem getting w2kPro to become part of domain
    ... > machine that is member of Workgroup and a WinXp machine that is member of ... > using a domain account. ... But on the W2kPro I have same user name as a local ...
    (microsoft.public.windows.server.networking)
  • Re: Problem getting w2kPro to become part of domain
    ... I got a W2kPro ... >> machine that is member of Workgroup and a WinXp machine that is member of ... >> using a domain account. ... I get "The credentials supplied conflict with an existing set ...
    (microsoft.public.windows.server.networking)