Policy Problem

  • Thread starter Thread starter Rick
  • Start date Start date
R

Rick

I am coming into this network new and don't know what
policies may have been set on the domain in the past. I
have a problem where I have a user that I created in the
domain that I have put in the Domain Admins and
Enterprise Admins group. I also have put it in the local
administrators group on a brand new Dell workstation (XP
Pro) that I just bought.

The problem is that the user does not have local admin
rights to either the new workstation or to any other
computer that is a member of the domain. If I log in with
this user to a domain controller it also does not have
local admin rights.

It seems as though there is some policy in place that is
blocking the ability of any user other than the one and
only "Administrator" account to have local admin rights
on any domain computer. I have poured through all of the
domain policies to try and find the setting but can't
seem to find anything that looks like it would cause this
problem.

Any suggestions as to what it may be would be greatly
appreciated.

Thanks,
Rick
 
Rick, where is this particular user located? try move this user to the same
location in the directory as administrator and se if that helps. If it dose
there is a policy prevent the particular user from what you said become a
local administrator I'm not know exactly what you mean here?

Logged in as this particular user you can use the command line based tool
gpresult (built in at WindowsXP and Windows Server 2003) to show applied
policies.

Download gpresult for Windows2000:
http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

How to Use the Group Policy Results (GPResult.exe):
http://www.microsoft.com/windowsxp/pro/using/itpro/managing/gpresults.asp
 
-----Original Message-----
Rick, where is this particular user located? try move this user to the same
location in the directory as administrator and se if that helps. If it dose
there is a policy prevent the particular user from what you said become a
local administrator I'm not know exactly what you mean here?

Logged in as this particular user you can use the command line based tool
gpresult (built in at WindowsXP and Windows Server 2003) to show applied
policies.

Download gpresult for Windows2000:
http://www.microsoft.com/windows2000/techinfo/reskit/tool s/existing/gpresult-o.asp

How to Use the Group Policy Results (GPResult.exe):
http://www.microsoft.com/windowsxp/pro/using/itpro/managi ng/gpresults.asp

--
Regards
Christoffer Andersson

No email replies please - reply in the newsgroup




.
Yes that was it, I didn't realize that my user was in an
Click to expand...
OU that had a policy applied that restricted local admin
functionality. Thank you very much for your help.
 
Back
Top