Jason Garms [MSFT]
December 5th 03, 07:49 PM
Steve,
There are probably an unlimited number of things that
could cause this, mostly due to tweaking different
settings on the system. Some examples would be removing
the users groups from other privileges that are granted by
default, changing NTFS file ACLs on system files and
directory from their defaults, or even changing registry
keys from their defaults. Have you done anything else to
the system, such as applying changes from some "security
guide", or security lockdown tool? What exact result
occurs when you attempt to logon as a "normal user"? what
error do you get and what is the exact experience?
best,
-jasong
>-----Original Message-----
>I have an account set up as a general user on a system
>not connected to a domain. For some reason it will not
>allow anything log onto the system locally unless it is
>part of the admin group. The local security policy is
>configured to allow users to log on locally, I have also
>specified interactive logon in the same policy, and made
>sure that the Users group is not prevented to log on.
>
>Is there something Im missing because I cant see it.
>
>Thanks
>
>Steve
>.
>
There are probably an unlimited number of things that
could cause this, mostly due to tweaking different
settings on the system. Some examples would be removing
the users groups from other privileges that are granted by
default, changing NTFS file ACLs on system files and
directory from their defaults, or even changing registry
keys from their defaults. Have you done anything else to
the system, such as applying changes from some "security
guide", or security lockdown tool? What exact result
occurs when you attempt to logon as a "normal user"? what
error do you get and what is the exact experience?
best,
-jasong
>-----Original Message-----
>I have an account set up as a general user on a system
>not connected to a domain. For some reason it will not
>allow anything log onto the system locally unless it is
>part of the admin group. The local security policy is
>configured to allow users to log on locally, I have also
>specified interactive logon in the same policy, and made
>sure that the Users group is not prevented to log on.
>
>Is there something Im missing because I cant see it.
>
>Thanks
>
>Steve
>.
>