Your account is configured tp prevent you from using this computer

M

Mike Lizotte

Hello All,

Error "Your account is configured tp prevent you from
using this computer"

I have over 300 PC deployed using Windows 2000. There is
no domain. I have implemented C2 security. All PC are
running as workgroups with a database of 3500 local user
accounts. All users belong to the user's group and are
required to authenticate when logging onto the PC
locally. In past three years this was never a problem.
It only became a problem when I moved my image onto new
computers as part of techroll. I had to detect new
hardware, updated many software programs to the later
versions. I also updated the windows 2000 from the
Microsoft windows update site to the latest security
patches & service packs SP4.

Now I randomly receive the above error. All users are
prevented from logging on, but administrators are OK. The
event logs are not full, in particular the security logs
are not an issue. I have read Microsoft articles on
crashonaudit fail...not the issue here. Alot of articles
are in reference to AD or a domain, again not applicable
here.

The event viewer shows no significant events have occurred
in leading up to the problem.

I started my deployment Jan 15, 2004 and since then many
sites have not had a problem yet, however 6 different
locations have, with some occurring multiple times over a
6 week period.

The temporary fix is to re-apply the local machine
security log. C:\secedit /refreshpolicy
machine_policy /enforce, followed by a required reboot of
the PC. Refreshing the policy without the reboot will not
work. I tried to run the cmd string in a bat file under
the local machine startup policy without success, even
when followed with a reboot. I had to do the cmd manually
and then reboot.

I noticed a user in google groups that had the same
problem with his home PC. This person indicated that they
had a response from Microsoft. Microsoft said they think
it might be one of their recent updates that caused this.
They suggested to role back some of the updates.

Since I am using the "Automatic Updates" feature at these
remote sites, I don't see how this would be an option.

Does anyone at Microsoft know a fix for this.

I have a high level of knowledge on windows 2000. I have
not finished my own investigation but thought I should
ask, in hopes of speeding up a resolution.

Comments appreciated...
 
D

David Adner

Did you check and verify the User Rights are still setup correctly and
that the users getting the error are in the appropriate groups? Does it
happen to specific users or computers? Once it happens, does it
"correct" itself or do you have to reapply your security template each
time? The error itself is a User Rights issue typically, so I would
check there first.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top