AD permissions inheritance incorrect

  • Thread starter Thread starter Khargis
  • Start date Start date
K

Khargis

I have a problem occurring on a Windows 2000 domain with
about 20 (windows 2000) clients. Two machines out of the
twenty, one of which is brand new, seems to be somehow
inheriting incorrect permissions. Any user that logs into
the Domain cannot run most of the software unless they are
set with Domain Administrator priveledges.

I have tried setting users to local Power User, local
Admin, and network Admin. Nothing seems to make any
difference unless the user is set as Domain Admin. (If the
user logs into the machine with a local account,
everything seems to work fine.)

I've completely reinstalled one of these machines, and I'm
still getting the same problem. (One of them is a brand
new Dell workstation, the other is an older machine that
was reinstalled.)

I've tried importing the COMPATWS.INF group policy, to see
if that had any effect. It didn't.
I've checked the standard group policy, and it doesn't
seem to be any different from any of the other machines on
the Domain.

I've run GPRESULT, and the only real difference I'm seeing
is that standard users seem to be missing the 'profile
single process' permission.

Both machines were clean W2K installs, and the software
that they are unable to run is locally installed on the
machine. (One of the pieces of software they are unable
to run is a FoxPro based DB application, the other is
Quickbooks) In both cases, the software, installed
locally, doesn't run, and it gets errors in accessing and
changing folders as if the user does not have the
permissions to access them.

At this point I'm not sure what else I can do. Are there
any other utilities out there that might give me a clue as
to what's happening?
 
Problem has been solved by adding the Domain user group
into the power user group on the local box. Still not
sure why this had to be done to get everything working,
but it seems to have done the job.
 
Back
Top