I have a problem occurring on a Windows 2000 domain with about 20 (windows 2000) clients. Two machines out of the twenty, one of which is brand new, seems to be somehow inheriting incorrect permissions. Any user that logs into the machine cannot run most of the software unless they are set with Domain Administrator priveledges.
I have tried setting users to local Power User, local Admin, and network Admin. Nothing seems to make any difference unless the user is set as Domain Admin.
I’ve completely reinstalled one of these machines, and I’m still getting the same problem. (One of them is a brand new Dell workstation, the other is an older machine that was reinstalled.)
I’ve tried importing the COMPATWS.INF group policy, to seeif that had any effect. It didn’t.
I’ve checked the standard group policy, and it doesn’t seem to be any different from any of the other machines on the Domain.
I’ve run GPRESULT, and the only real difference I’m seeing is that standard users seem to be missing the ‘profile single process’ permission.
Both machines were clean W2K installs, and the software that they are unable to run is locally installed on the machine. (One of the pieces of software they are unable to run is a FoxPro based DB application, the other is Quickbooks) In both cases, the software, installed locally, doesn’t run, and it gets errors in accessing and changing folders as if the user does not have the permissions to access them.
I’ve also verified that the accounts in AD on the server are correct, and I’ve tried deleting and recreating them. This also seems to have no effect.
At this point I’m not sure what else I can do. Are there any other utilities out there that might give me a clue as to what’s happening?
Any other ideas would be appreciated.