Problems with restricted groups - users losts permissions

Discussion in 'Active Directory' started by yurez, Nov 30, 2005.

  1. yurez

    yurez Guest

    in my AD in test OU there are 2 restricted groups
    Administrators (mydomain\domain admins + localadmin)
    Power users (mydomain\domain users)
    John is a member of Domain users group
    before moving John's computer to this test OU John was a member of local
    admins group on this local machine and have some profile with some settings.
    after moving John's computer to this test OU and after rebooting of his
    computer John can see just clear new profile. John try to change some
    settings in profile, but after next logon he can see clear profile without
    any settings again.
    after removing John's comp from this test OU and including john's account in
    local admin group John can see his old profile again
    this error i can see only on computers with fat32 system drive (windows 2000
    and windows xp)
    in my oponion, Jonh after logon gets GUEST rights, but a can't explain this...
    help me please to slove this problem
    yurez, Nov 30, 2005
    1. Advertisements

  2. Is John's computer have the latest service packs applied? (Windows 2000 is
    at SP4 or Windows XP is at SP2) The reason that I ask is that there are
    some issues using a Restricted Groups GPO when the client workstation
    doesn't have the latest service pack applied.
    neo [mvp outlook], Nov 30, 2005
    1. Advertisements

  3. yurez

    yurez Guest

    critical situiation with security updates (some computers have
    win2000+sp2!!!) was the first reason to apply this policy (restricted
    groups), because all of my users have admin rights on their computers. so,
    latest SP's are not applied on most of my computers.
    and i think, that WSUS deployment must be the first step before applying
    restricted groups.. but i'm afraid that my users can decline all update
    yurez, Nov 30, 2005
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.