70-217 - Local/Domain Policies situation!

Author

Local/Domain Policies situation!

Beatle

2004-10-04, 2:02 pm

I have installed a Windows XP pro on a computer, and during install I chose to join our local domain here in the company.

I have created a domain user account member of the Administrators Group as equal as my account, with Domain Admin Privileges. But, I don't know why, the user in question isn't allowed to do a lot of things on that computer. Even login in as a Local Administrator doesn't seem to give him full local rights, as should be.

Does anyone know how can I solve this problem? I didn't figure out why his account, with same privileges as mine, cannot do a lot of things on his machine.

Thanks

em_ar_ducks

2004-10-04, 10:54 pm

1. How many XP Pro Machines are there in your domain?

2. What Group Policies are being applied from the domain?

3. what specific rights are in question?

One thing to remember is that local policies are applied first, then overwritten by the domain policies. XP by default locks things down, unless the domain policy explicity "loosens" restrictions, the tighter XP local policy will remain in effect. There are a couple of utilities that you can get to help sort out group policy on XP.

http://www.microsoft.com/windows200.../gpresult-o.asp

http://www.microsoft.com/downloads/...&displaylang=en

hope this helps a bit

Beatle

2004-10-05, 5:45 pm

Thanks for the answer em_ar_ducks

Answering your questions, we have a samll domain (samll company), but we are expecting some growth. Now we have six machines using XP Pro. By now, we are implementing the domain, and I have the Default Domain Policy and another one that blocks the use of P2P apllications.

Talking about the rights in question, the user, even login in using his domain account doesn't have rights to even create a Text document on the hard drive, or save, for example, a Web Page. I thought that was strange because he belongs to the Domain Adimin Group as I do, and I have the proper rights.

I even put him in the same OU as I, and he still doesn't have those permissions.

I'll try to use the tolls you've put here to analyze. But I think that's a strange situation.

Any other ideal will be a lot of help!

Thanks once again

Armindo

bfied

2004-10-12, 8:45 pm

Is the domain account that you created been added to the computers local administrators group? If not he probably has very little rights to the computer.

curiousgeorge

2004-10-25, 1:23 am

Beatle,

I have had that problem before. I always just created a new user account for the person. There is something corrupt in the user account.

bfied,

the Domain Admins group is automatically put into the Local Admins group when a computer joins the domain, so that's not the issue.

Sponsored Links