Certain commands are not accessable to machine administrator accou

  • Thread starter Thread starter Bradwin
  • Start date Start date
B

Bradwin

Had a major operating system failure on a PC. Hardware tests indicated on
malfunctions. Windows Restore would not work. Used the PC manufacturer's
Operating System Restore tool (essential a clean install). Machine was
rejoined to a domain. No users, except those with domain administrator
accounts may log into the domain. Domain and Local Machine Administrators
are prevented from removing the computer from the domain and returning it to
a workgroup status.

IPA is static. Gateway DNS and WINS are correct. Yet, machine attempts to
locate and authenticate with a commercial ISP DNS whenever someone logs on.

Can anything be done about this?
 
The advice to reset security settings to the default values made it possible
to withdraw from the domain. But, while it is still in the domain, standard
users are not allowed to log on interactively because of local security
policy. I have been through secpol.msc more than once. There is no setting
to allow or disallow interactive log on. This seems to be true even in group
policy, although I may have missed something there.

Thanks for the help.
Bradwin
 
Back
Top