Networks

Ask something
Question Locked

Removing Active Directory from Win 2003 R2 delets all local users

0 helpful
2 replies

by alterangelus

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am using Windows 2003 R2 as a Terminal Server. Lately I tried to install Active Directory Service thinking to get more control over Terminal Server Access. Made up a Domain, a DNS Server etc (things you actually don't need for Terminal Servers). But there were only a few things in the Active Directory with regard to Terminal Server (licensing group). I really didn't need them. So I removed everything. Now all local users are gone (I use them as Terminal Server Users). I created new ones, gave them acces to the old still existing profile folder. Gave them access to the old NTUser.dat registrykeys, changed the profile location in HKLM..WindowsNT\Profilelist. Now they are working as before, but Group Policy doesn't seem to affect them anymore. They also cannot access https sites on the internet, except when they are added to the admin Group...
Before making a new install from scratch. Is there a way to bring system back to its old state? (no system backup available. - "Missing Intelligence requires More Muscles")

Thanks for reading all this!

2 replies

by alterangelus

The 'policies' keys in the HKU registry will not add a new user access permission by inheriting it, you must add the new permission directly. That's the reason why group policies didn't apply - the limited user couldn't read his own policies. I also forgott the classes-key which I now changed by secondary logon during a session of the limited user.

So everything is resolved.

Sometimes you need to post to think better!

This discussion is closed to new replies.