Ahmed Aldoseri
April 16th 03, 08:46 AM
On the default domain controller's group policy, by
setting the value of "Additional restricitons for
anonymous connections" to 1, 'do not allow enumeration of
SAM accounts and shares', users cannot logon to Windows XP
Professional computers with a message that says "Your
account is configured to prevent you for using this
computer, please try another computer". When viewing the
security log on the concerned computer, event number 533
is logged.
I've not had this problem with windows 2000 professional
computers.
Unless the domain user was a member of the administrators
group (whether local, or domain), the user's logon will
fail.
setting the value of "Additional restricitons for
anonymous connections" to 1, 'do not allow enumeration of
SAM accounts and shares', users cannot logon to Windows XP
Professional computers with a message that says "Your
account is configured to prevent you for using this
computer, please try another computer". When viewing the
security log on the concerned computer, event number 533
is logged.
I've not had this problem with windows 2000 professional
computers.
Unless the domain user was a member of the administrators
group (whether local, or domain), the user's logon will
fail.