Quote:
|
Originally Posted by scmds
Thanks for the quick response. I should have been more clear. the machine has already been added to the domain and the user Max created intitially as a local administrator. I then at a later time removed him from the Administrator group and added him the Users group, effectively demoting him.
I could definitely pull the machine off the domain and start over? Maybe I'll try that following your instructions and let you know what happens. Is there a reason you cannot promote or demote users on the fly? Everything I've read suggests that you can?
As for AD Group Policy, I'm still learning, actually an English Major, but I have fallen into the role of administration. I was hoping to just give all new users (and eventually migrate the existing) Users Group priviliges. This would, if nothing else, keep themn from installing apps, which is my main concern.
Again, thanks for the quick response and I'll repost in a few minutes after trying your method.
Thanks,
Steven
|
Okay, nope. same thing. I pulled the computer off the domain, deleted the comp out of AD, re-added as admin, didn't retsart, Control Panel, Users, added Max.domain, added to Users Group, logged out, logged in as Max, got Users priviledges, logged back out, logged in again and presto... another profile.
the quest continues...
Because this is happening with any user and on any machine I have to believe it's either a user account setup error or something domain-wide that needs to be changed at the AD level?