Hello Cris,
Thank you for your post!
What errors do you receive when opening the Active Directory MMCs?
You may also experience the behavior due to the absence of the "Everyone"
group and "Authenticated Users" from the "Access this computer from the
network" portion of the "Domain controller security policy".
1. Click Start, point to Programs, click Administrative Tools, and then
click "Active Directory Users and Computers".
2. Right click the "Domain Controls OU" and then click Properties.
3. Click the Group Policy tab, click to highlight "Domain Controller
Security Policy", and then click Edit.
4. Click the plus sign (+) to expand Computer Configuration, expand Windows
Settings, expand Security Setting, expand "Local Security Policy", and then
click to highlight "User Rights Assignments".
5. Click the "Access This Computer From The Network" policy, add the
"Everyone" and "Authenticated Users" groups, and then close the snap-in.
6. To refresh is policy run the following command from the command line:
"secedit /refreshpolicy machine_policy /enforce" (without the quotation
marks)
Reference the following KB Articles:
266206 User Cannot logon to Windows 2000 Domain Controllers that have been
http://support.microsoft.com/?id=266206
329887 You Cannot Interact with Active Directory MMC Snap-Ins
http://support.microsoft.com/?id=329887
257346 "Access This Computer from the Network" User Right Causes Tools Not
to
http://support.microsoft.com/?id=257346
Best Regards.
Ben Ybarra, Microsoft
Please do not send email directly to this alias. This is my online account
name for newsgroup participation only.
This posting is provided "AS IS" with no warranties, and confers no rights.
