Re: Access denied to Control Panel applets!

Try having another domain user logon to his computer to see if they
experience the same behavior or not. Verify that his computer and user
account are in the containers you expect. It definitely sounds like domain
level user configuration Group Policy since it does not apply to. See if he
can run rsop.msc while logged onto his computer as a domain user to see what
GP settings it shows for his user account and what Group Policy is applying
the setting in question. If he can not run rsop.msc [I am not sure if it
will work for a regular user offhand] then logon as an administrator and run
the Resultant Set of Policy mmc snapin for his user account. --- Steve


"Brad Pears" <donotreply@xxxxxxxxxxx> wrote in message
news:uXC8FPxiGHA.2220@xxxxxxxxxxxxxxxxxxxxxxx
I have a strange issue going on here...

We have a Windows 2000 SBS domain in our company. I have some OU's set up
and some policies are applied. However, nowhere do I have a policy set to
not allow access to control panel appletss for domain users of any OU -
EXCEPT for our terminal server users - who are in a separate OU
altogether.

I have one user on a new XP Pro SP2 laptop who is NOT in this OU at all,
yet
when he tries to access a control panel applet (i.e. Printers and other
hardware) he gets the following message...

"These Control Panel options are not available. The content of this
Control
Panel Category has been made unavailable by your system administrator. To
make changes on this area, contact your system administrator."

This user is logged onto the domain, and other users in the same OU who
are
also logged into the domain, have full access to their control panel
applets. His domain account is also listed as local "adminstrator" on his
laptop. If I log on to his machine using the local administrator account,
I
can access the control panel applets no probs... If he logs in locally to
his laptop, he can also access the control panel applets. I also checked
the
local policies on his machine - saw nothing there that would prevent his
domain account access to the applets...

Any ideas on how to maybe rectify this issue?

Help!

Thanks, Brad





.