Certain commands are not accessable to machine administrator accou

B

Bradwin

Had a major operating system failure on a PC. Hardware tests indicated on
malfunctions. Windows Restore would not work. Used the PC manufacturer's
Operating System Restore tool (essential a clean install). Machine was
rejoined to a domain. No users, except those with domain administrator
accounts may log into the domain. Domain and Local Machine Administrators
are prevented from removing the computer from the domain and returning it to
a workgroup status.

IPA is static. Gateway DNS and WINS are correct. Yet, machine attempts to
locate and authenticate with a commercial ISP DNS whenever someone logs on.

Can anything be done about this?
 
B

Bradwin

The advice to reset security settings to the default values made it possible
to withdraw from the domain. But, while it is still in the domain, standard
users are not allowed to log on interactively because of local security
policy. I have been through secpol.msc more than once. There is no setting
to allow or disallow interactive log on. This seems to be true even in group
policy, although I may have missed something there.

Thanks for the help.
Bradwin
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top