Re: Access denied to Control Panel applets!

I was able to run RSOP when logged on as the user. It really didn't show
that much - nothing for the control panel etc... I even tried a
gpupdate/force when logged on as this user - but that didn;t do anything...
It is definately a user policy causing the issue because I had him log into
our domain using another computer and he get's the same restrictions on that
other PC!! I also had another user log into the domain using his laptop and
that user had full rights - so that pretty much tells me it is a user policy
being applied somewhere...Incidentally, the user that logged onto his
machine is in the same OU as him!!!

This user does log onto our terminal servers from time to time and these
policy restrictions he is seeing are definately applied to the terminal
servers - as the terminal servers are in an OU of their own so that users
logging onto those machines can not play too much! :-) I don'lt think this
is causing the issue though because a few of the other users in his OU also
log onto the term servers from time to time and none of those users have the
same issue he does...

Maybe I should just delete his profile and re-create it to see if that
works... I cannot think of anywhere else to check.

What do you think?

Brad
"Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:8sSdnRdnlIkxxRXZnZ2dneKdnZydnZ2d@xxxxxxxxxxxxxx
Try having another domain user logon to his computer to see if they
experience the same behavior or not. Verify that his computer and user
account are in the containers you expect. It definitely sounds like
domain level user configuration Group Policy since it does not apply to.
See if he can run rsop.msc while logged onto his computer as a domain user
to see what GP settings it shows for his user account and what Group
Policy is applying the setting in question. If he can not run rsop.msc [I
am not sure if it will work for a regular user offhand] then logon as an
administrator and run the Resultant Set of Policy mmc snapin for his user
account. --- Steve


"Brad Pears" <donotreply@xxxxxxxxxxx> wrote in message
news:uXC8FPxiGHA.2220@xxxxxxxxxxxxxxxxxxxxxxx
I have a strange issue going on here...

We have a Windows 2000 SBS domain in our company. I have some OU's set up
and some policies are applied. However, nowhere do I have a policy set to
not allow access to control panel appletss for domain users of any OU -
EXCEPT for our terminal server users - who are in a separate OU
altogether.

I have one user on a new XP Pro SP2 laptop who is NOT in this OU at all,
yet
when he tries to access a control panel applet (i.e. Printers and other
hardware) he gets the following message...

"These Control Panel options are not available. The content of this
Control
Panel Category has been made unavailable by your system administrator. To
make changes on this area, contact your system administrator."

This user is logged onto the domain, and other users in the same OU who
are
also logged into the domain, have full access to their control panel
applets. His domain account is also listed as local "adminstrator" on his
laptop. If I log on to his machine using the local administrator account,
I
can access the control panel applets no probs... If he logs in locally
to
his laptop, he can also access the control panel applets. I also checked
the
local policies on his machine - saw nothing there that would prevent his
domain account access to the applets...

Any ideas on how to maybe rectify this issue?

Help!

Thanks, Brad







.

Relevant Pages

  • Re: Login security
    ... > know about a policy to stop access in the Control Panel. ... No worries, Richard. ... the control panel, ... sure that it's not applied to the administrator account. ...
    (microsoft.public.win2000.security)
  • Re: Access denied to Control Panel applets!
    ... GP settings it shows for his user account and what Group Policy is applying ... not allow access to control panel appletss for domain users of any OU - ... Panel Category has been made unavailable by your system administrator. ... he can also access the control panel applets. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SMS Advance CLient
    ... only specified control panel applets" policy enabled. ... "Show only specified control panel applets" policy ... > advance client installed, dont have all the control panel appalets.. ...
    (microsoft.public.sms.admin)
  • Re: Need to gray out an option in Graphics Properties.
    ... Removes the Settings tab from Display in Control Panel. ... This policy prevents users from using Control Panel to add, configure, or ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Group Policy -> Missing Group Policy settings
    ... Install the templates on the Group Policy Management machines, ... Default Domain Policy, with the following settings: ... Permit Acces to the control panel, ... I see the GPO Default Domain Policy is Apllied, and the Administrator ...
    (microsoft.public.windows.server.active_directory)
Loading