Networks

Ask something
Discussion Locked

Users need admin privilages to log on

0 helpful
15 replies

by mackem 2 views

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to avoid a reinstall of one of our workstations. Administrators can log on to a domain without any problems, but when a user tries, he gets the Ctrl Atl & Del box. I have checked the profiles for users and the User.dat and NTUser.dat files are not present. Every time a user tries to log on a new folder is created for the user in profiles. eg: User, User0000, User0001 and so on. If the user is added to the Adminsitrator group, then they can log on.
We can not allow users Admin privilages.
This workstation has a lot of programs installed, and is in constant use.
There is a local user account which can be used. This account is being used by everyone at the present time, but users need to be able to access the network andemails.
Does anyone have any suggestions.
Thahnks JV.

15 replies

by gigelul

I'm not sure if I understand your issue. When a user try to logon to domain he/she received again CTR+ALT+DEL? Without any error message? In events no errors are reported?
For beginning you can try to reauthenticate your workstation in domain:
Forthat remove from Server Manager the workstation name from list. Log on workstation with local with local admin rights and in network properties set as member of workgroup. Reboot computer. Log on again as local admin and set as member of domain and set the option . Give the information about name and password of the Domain Admin. Reboot computer.
Post comments with additional info.

by mackem

This is not the issue. Anyone with Admin privilages can log on to Domain. The problem is that network user accounts are not being created correctly in the profiles folder. When a user tries to log on an empty folder is created. There is no User.dat or NTUser.dat files. The other folders that are normally created in the users profile are not created either.

by mackem

Thanks for the response,I have looked at the link and thought that this was the answer. User profiles can be created, but only if the user is an administrator. I believe that this is a registry issue. The problem is finding which key to alter.

by joseph moore

I would guess the security permissions on the user profiles folders are not set right. Specifically, the All Users folders and/or the Default Users folders.
Here is a Technet article with the default permissions:
http://support.microsoft.com/search/preview.aspx?scid=kb;en-us;Q244600
(please remove any spaces)

It does sound like the user logging in does not have rights for their profile to be copied from Default User into their own profile folder structure.

hope this helps

by mackem

Thanks for the response, but this is something I have already looked at. Even setting permissions to Everyone full control dosen't help.
JV

by mcghee98mcp

When you say domain, are you using Active Directory? I have 2 somain contrrollers and sometimes the accounts don.t get replicated across to each other. Also if youn are using login scripts for your users and the scripts point to one or the other server, remove the scripts form your users account which are trying to log in, If the workstation then logs in successfully, you can narrow it down to the script assigned to the user/workstation. Hope this helps.

by mackem

We are using NT4.0, so this is not an Active Directory issue. The users can not create accounts on the computer only administrators.
Thanks for you response.

by tom

I would suggest taking a look at any policies you may have applied to your network. I have multiple locations and use policies to deny login permissions to users trying to login at the wrong location. You may have a policy setup on your server denying logins to your users group. Good luck.

by mackem

We do have policies of this kind in use, but it does not apply here. With this type of policy, you get a message telling you the ligin is denied. This is not the case here. The user tries to login and simply gets the Ctrl+Alt+Del screen again.
Thanks for you response.

by avidetto

Well, from all the other answers and stuff it seems you've tried I can tell you that it narrows it down to a defualt user being corrupt. I suggest if you do not want to rebuild the systems you delete all profiles BUT the Admin profile, then, copy the profiles form a "clean system." Make sure you have killed All profiles, I have done this on NT4.0. I wonder what sp your on, are you running NT, 2k or xp? If your running NT sp6a should also be loaded after this. This will prevent it from happening again, well at least that's Microsoft's story. This has corrected this issue for me in the past, I hope this helps -G. Luck -Al

This discussion is closed to new replies.