Hi Lee,
I have some suggestions here.
1. Log on as the local administrator to the computer. Let's see whether you
can change the wallpaper, file locations in Word, or chagne the group
policy.
2. Logon Win2k domain as domain user. Try to run the gpresult to see which
group policies are applied to the computer. Check whether some policies
have denied the user to change these settings.
3. Run the whoami.exe to check the win2k domain user belongs to which
groups (local and domain). Check whether the user has the proper permission
to change these options.
Thanks for using Microsoft News Group!
Sincerely,
Steven Liu
Microsoft Online Partner Support
MCSE 2000
Get Secure! ¨C
www.microsoft.com/security
This posting is provided ¡°as is¡± with no warranties and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Lee" <
[email protected]>
| Sender: "Lee" <
[email protected]>
| References: <
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
| Subject: RE: XP Security
| Date: Tue, 22 Jul 2003 08:04:27 -0700
| Lines: 395
| Message-ID: <
[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: quoted-printable
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcNQYotasdq/gqaDRyqlf3EixqPH5A==
| Newsgroups: microsoft.public.windowsxp.security_admin
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.windowsxp.security_admin:68729
| NNTP-Posting-Host: TK2MSFTNGXA08 10.40.1.160
| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
|
| Hi Steven,
| I tried that command several times. I even tried
| the /Overwrite option, all with the same result - no
| change. I don't get any error messages when I re-join
| the NT 4.0 domain. However, I did get an error message
| once when joining the Windows 2000 Domain saying
| something about the trust relationship failing between
| the computer and the domain, or the domain controller, I
| don't remember which. But, I seemed to get into the 2000
| domain later anyway without any error messages. The
| event log even says that the group policy was applied
| successfully. We have ISA server, but the client was
| removed from one of the computers. I disable it on the
| other one, and re-set the option in IE, but that didn't
| seem to help either.
| Unfortunately, these are a user's machines, so I don't
| have access to them all the time. I'm setting up another
| machine for one of the users to use temporarily so I can
| have full access to the computer that's giving me
| trouble. I'm trying to join the computer to a Windows
| 2000 domain. I moved 20 computer to the WIN2000 domain
| on July 13th. 2 out of those 20 computer now have this
| problem. The computers do show up in Active Directory
| after joing the domain - with properties just like the
| rest of the computers in the domain.
| : - )
| Lee
| >-----Original Message-----
| >Hi Lee,
| >
| >Let's perform the steps in the following article to
| reset the security
| >settings to default.
| >
| >313222 HOW TO: Reset Security Settings Back to the
| Defaults
| >
http://support.microsoft.com/?id=313222
| >
| >If you have the firewall installed, please disable it
| and then join the NT4
| >domain again.
| >
| >When you try to join the computer to the NT4 domain,
| what error did you
| >encounter?
| >
| >Thanks for using Microsoft News Group!
| >
| >Sincerely,
| >
| >Steven Liu
| >
| >Microsoft Online Partner Support
| >
| >MCSE 2000
| >
| >Get Secure! ¨C
www.microsoft.com/security
| >
| >This posting is provided ¡°as is¡± with no warranties
| and confers no rights.
| >--------------------
| >| Content-Class: urn:content-classes:message
| >| From: "Lee" <
[email protected]>
| >| Sender: "Lee" <
[email protected]>
| >| References: <
[email protected]>
| ><
[email protected]>
| ><
[email protected]>
| ><
[email protected]>
| ><
[email protected]>
| ><
[email protected]>
| >| Subject: RE: XP Security
| >| Date: Fri, 18 Jul 2003 09:46:47 -0700
| >| Lines: 266
| >| Message-ID: <
[email protected]>
| >| MIME-Version: 1.0
| >| Content-Type: text/plain;
| >| charset="iso-8859-1"
| >| Content-Transfer-Encoding: quoted-printable
| >| X-Newsreader: Microsoft CDO for Windows 2000
| >| X-MIMEOLE: Produced By Microsoft MimeOLE
| V5.50.4910.0300
| >| Thread-Index: AcNNTC26WAKPjaEwTR6KVsctiKpn0g==
| >| Newsgroups: microsoft.public.windowsxp.security_admin
| >| Path: cpmsftngxa06.phx.gbl
| >| Xref: cpmsftngxa06.phx.gbl
| microsoft.public.windowsxp.security_admin:68138
| >| NNTP-Posting-Host: TK2MSFTNGXA14 10.40.1.166
| >| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
| >|
| >| Been there. Done that. Problem persists. Please see
| my
| >| message posted at 8:58 am today.
| >| >-----Original Message-----
| >| >Hi Lee,
| >| >
| >| >You need do nothing with the error. We can just
| ignore
| >| it.
| >| >
| >| >For more information, you can refer to teh article:
| >| >
| >| >810616 PRB: Warning Error 1517 in Event Viewer after
| >| First Restart
| >| >
http://support.microsoft.com/?id=810616
| >| >
| >| >Thanks for using Microsoft News Group!
| >| >
| >| >Sincerely,
| >| >
| >| >Steven Liu
| >| >
| >| >Microsoft Online Partner Support
| >| >
| >| >MCSE 2000
| >| >
| >| >Get Secure! ¨C
www.microsoft.com/security
| >| >
| >| >This posting is provided ¡°as is¡± with no warranties
| >| and confers no rights.
| >| >--------------------
| >| >| Content-Class: urn:content-classes:message
| >| >| From: "Lee" <
[email protected]>
| >| >| Sender: "Lee" <
[email protected]>
| >| >| References: <012f01c34c78$e13db510
|
[email protected]>
| >| ><
[email protected]>
| >| ><
[email protected]>
| >| ><
[email protected]>
| >| >| Subject: RE: XP Security
| >| >| Date: Fri, 18 Jul 2003 07:49:28 -0700
| >| >| Lines: 186
| >| >| Message-ID: <
[email protected]>
| >| >| MIME-Version: 1.0
| >| >| Content-Type: text/plain;
| >| >| charset="iso-8859-1"
| >| >| Content-Transfer-Encoding: quoted-printable
| >| >| X-Newsreader: Microsoft CDO for Windows 2000
| >| >| X-MIMEOLE: Produced By Microsoft MimeOLE
| >| V5.50.4910.0300
| >| >| Thread-Index: AcNNO8oT57C2ngPcSI2OFvK1/3RJ+w==
| >| >| Newsgroups:
| microsoft.public.windowsxp.security_admin
| >| >| Path: cpmsftngxa06.phx.gbl
| >| >| Xref: cpmsftngxa06.phx.gbl
| >| microsoft.public.windowsxp.security_admin:68123
| >| >| NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
| >| >| X-Tomcat-NG:
| microsoft.public.windowsxp.security_admin
| >| >|
| >| >| HI Steven:
| >| >| EVENT ID 1517:
| >| >| Windows saved user MDVA\Administrator registry
| while
| >| an
| >| >| application or service was still using the registry
| >| >| during log off. The memory used by the user's
| registry
| >| >| has not been freed. The registry will be unloaded
| when
| >| it
| >| >| is no longer in use.
| >| >| This is often caused by services running as a user
| >| >| account, try configuring the services to run in
| either
| >| >| the LocalService or NetworkService account.
| >| >| I also received a EVENT ID 1516 about 7 second
| later:
| >| >| Windows unloaded user MDVA\Administrator registry
| when
| >| it
| >| >| received a notification that no other applications
| or
| >| >| services were using the profile.
| >| >| The Knowledgebase article related to this issue
| stated
| >| >| that I don't need to do anything about this
| message.
| >| >| However, I still can't make any setting changes to
| the
| >| >| computer no matter how I log in. I could add and
| >| delete
| >| >| users though. I could not edit the local group
| >| policy.
| >| >| We cannot print, and the user cannot use Outlook
| (the
| >| >| error message just says "Cannot start Microsoft
| >| >| Outlok.") This is happening on two XP Pro
| >| workstations,
| >| >| and it started after I joined them to a new Windows
| >| 2000
| >| >| domain.
| >| >| I get a "Loading your settings failed. (Access is
| >| >| denied)" Whenever I boot the machine, and when I
| just
| >| >| log off and log on again without re-booting. There
| >| were
| >| >| also some errors about ActiveX controls not working
| >| >| (earlier in the week), but I'm not getting them now.
| >| >| I hope this helps. If you need more information,
| let
| >| me
| >| >| know.
| >| >| Thanks for your help!
| >| >| : - )
| >| >| Lee
| >| >| >-----Original Message-----
| >| >| >Hi Lee,
| >| >| >
| >| >| >Would you please paste the detail error of the
| event
| >| >| error?
| >| >| >
| >| >| >I will continue to help you.
| >| >| >
| >| >| >Thanks for using Microsoft News Group!
| >| >| >
| >| >| >Sincerely,
| >| >| >
| >| >| >Steven Liu
| >| >| >
| >| >| >Microsoft Online Partner Support
| >| >| >
| >| >| >MCSE 2000
| >| >| >
| >| >| >Get Secure! ¨C
www.microsoft.com/security
| >| >| >
| >| >| >This posting is provided ¡°as is¡± with no
| warranties
| >| >| and confers no rights.
| >| >| >--------------------
| >| >| >| Content-Class: urn:content-classes:message
| >| >| >| From: "Lee" <
[email protected]>
| >| >| >| Sender: "Lee" <
[email protected]>
| >| >| >| References: <012f01c34c78$e13db510
| >|
[email protected]>
| >| >| ><
[email protected]>
| >| >| >| Subject: RE: XP Security
| >| >| >| Date: Fri, 18 Jul 2003 06:11:07 -0700
| >| >| >| Lines: 81
| >| >| >| Message-ID: <0bd101c34d2e$0c97dfa0
|
[email protected]>
| >| >| >| MIME-Version: 1.0
| >| >| >| Content-Type: text/plain;
| >| >| >| charset="iso-8859-1"
| >| >| >| Content-Transfer-Encoding: quoted-printable
| >| >| >| X-Newsreader: Microsoft CDO for Windows 2000
| >| >| >| Thread-Index: AcNNLgyXP2ehQ+JsRl22DZ3DmgSieA==
| >| >| >| X-MimeOLE: Produced By Microsoft MimeOLE
| >| >| V5.50.4910.0300
| >| >| >| Newsgroups:
| >| microsoft.public.windowsxp.security_admin
| >| >| >| Path: cpmsftngxa06.phx.gbl
| >| >| >| Xref: cpmsftngxa06.phx.gbl
| >| >| microsoft.public.windowsxp.security_admin:68113
| >| >| >| NNTP-Posting-Host: TK2MSFTNGXA13 10.40.1.165
| >| >| >| X-Tomcat-NG:
| >| microsoft.public.windowsxp.security_admin
| >| >| >|
| >| >| >| Hi Steven,
| >| >| >| Thanks for your response. I tried it, but there
| >| was
| >| >| no
| >| >| >| change. I think it has something to do with the
| >| 1517
| >| >| >| error, but there are no services running under
| the
| >| >| user's
| >| >| >| account.
| >| >| >| : - )
| >| >| >| Lee
| >| >| >| >-----Original Message-----
| >| >| >| >Hi Lee,
| >| >| >| >
| >| >| >| >Try to log on the computer with the local admin
| >| and
| >| >| logon
| >| >| >| to local
| >| >| >| >computer. Then, backup the user profile of the
| >| domain
| >| >| >| user. Then, delete
| >| >| >| >the 2 domain user account.
| >| >| >| >
| >| >| >| >Then, add the domain user to local
| administrator
| >| >| group.
| >| >| >| And logon the
| >| >| >| >domain again. If all works well, remove the
| domain
| >| >| user
| >| >| >| from local
| >| >| >| >administrator if necessary.
| >| >| >| >
| >| >| >| >Thanks for using Microsoft News Group!
| >| >| >| >
| >| >| >| >Sincerely,
| >| >| >| >
| >| >| >| >Steven Liu
| >| >| >| >
| >| >| >| >Microsoft Online Partner Support
| >| >| >| >
| >| >| >| >MCSE 2000
| >| >| >| >
| >| >| >| >Get Secure! ¨C
www.microsoft.com/security
| >| >| >| >
| >| >| >| >This posting is provided ¡°as is¡± with no
| >| warranties
| >| >| and
| >| >| >| confers no rights.
| >| >| >| >--------------------
| >| >| >| >| Content-Class: urn:content-classes:message
| >| >| >| >| From: "Lee Peterson"
| <
[email protected]>
| >| >| >| >| Sender: "Lee Peterson"
| <
[email protected]>
| >| >| >| >| Subject: XP Security
| >| >| >| >| Date: Thu, 17 Jul 2003 08:34:15 -0700
| >| >| >| >| Lines: 12
| >| >| >| >| Message-ID: <012f01c34c78$e13db510
| >|
[email protected]>
| >| >| >| >| MIME-Version: 1.0
| >| >| >| >| Content-Type: text/plain;
| >| >| >| >| charset="iso-8859-1"
| >| >| >| >| Content-Transfer-Encoding: 7bit
| >| >| >| >| X-Newsreader: Microsoft CDO for Windows 2000
| >| >| >| >| X-MimeOLE: Produced By Microsoft MimeOLE
| >| >| V5.50.4910.0300
| >| >| >| >| Thread-Index: AcNMeOE9NqeU3+GuQEiD9BlCgqx9UQ==
| >| >| >| >| Newsgroups:
| >| >| microsoft.public.windowsxp.security_admin
| >| >| >| >| Path: cpmsftngxa06.phx.gbl
| >| >| >| >| Xref: cpmsftngxa06.phx.gbl
| >| >| >| microsoft.public.windowsxp.security_admin:67894
| >| >| >| >| NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
| >| >| >| >| X-Tomcat-NG:
| >| >| microsoft.public.windowsxp.security_admin
| >| >| >| >|
| >| >| >| >| I recently moved an XP Pro workstation from
| an
| >| NT 4
| >| >| >| domain
| >| >| >| >| to a Windows 2000 domain. Now, the machine
| is
| >| >| totally
| >| >| >| >| locked down and we are unable to make any
| >| setting
| >| >| >| changes
| >| >| >| >| (wallpaper, file locations in Word, or chagne
| >| the
| >| >| group
| >| >| >| >| policy), either as the user, the domain
| admin,
| >| or
| >| >| the
| >| >| >| >| machine admin. I tried resetting security
| >| setting
| >| >| >| >| according to the details in MS Knowledge Base
| >| >| Article -
| >| >| >| >| 313222, but that didn't change anything.
| When
| >| we
| >| >| boot
| >| >| >| the
| >| >| >| >| machine, we got an error message that
| >| said "Loading
| >| >| >| your
| >| >| >| >| settings failed. (Access is denied) We're
| also
| >| >| getting
| >| >| >| a
| >| >| >| >| windows Script Host error message and event
| >| codes
| >| >| 1516
| >| >| >| and
| >| >| >| >| 1517 appear in the Application event log.
| >| >| >| >|
| >| >| >| >
| >| >| >| >.
| >| >| >| >
| >| >| >|
| >| >| >
| >| >| >.
| >| >| >
| >| >|
| >| >
| >| >.
| >| >
| >|
| >
| >.
| >
|
