DOMAIN_LOGIN PROBLEM

[sudhi_shrivatsa]

A vista box is joined to a WIN2K Domain. When a normal user is made logon for
the first time it simply hangs in between and gives. Windows Mail error with
OK button. After that nothing happens. Even after trying with diff users.
When the same user is made member of local admin gropup of the Vista box, it
logins perfectly.

SO I thought it is ACL problem with the prfile folder i.e, \users\username
and updating registry for the first time.

I changed all the ACls to full control for the user and then tried again but
in vein. Can somebody help this out.

Domain: WIN2K AD
Vista BOX: Preloaded HP Laptop.

 

[Carey Frisch [MVP]]

Before moving on, please check your Windows Vista Edition first.

Right click on Computer, choose properties. You will see your Windows Vista edition.

Please note Windows Vista Home Basic and Windows Vista Home Premium cannot join in domain by design.

For more information:

You cannot join a Windows Vista Home Premium-based computer to a domain
http://support.microsoft.com/kb/929543/en-us

If you are not using above editions, please refer the following article to double check your steps:

Joining a Windows Vista Wired Client to a Domain
http://technet.microsoft.com/en-us/library/bb727031(TechNet.10).aspx

--
Carey Frisch
Microsoft MVP
Windows Desktop Experience -
Windows Vista Enthusiast

---------------------------------------------------------------

A vista box is joined to a WIN2K Domain. When a normal user is made logon for
the first time it simply hangs in between and gives. Windows Mail error with
OK button. After that nothing happens. Even after trying with diff users.
When the same user is made member of local admin gropup of the Vista box, it
logins perfectly.

SO I thought it is ACL problem with the prfile folder i.e, \users\username
and updating registry for the first time.

I changed all the ACls to full control for the user and then tried again but
in vein. Can somebody help this out.

Domain: WIN2K AD
Vista BOX: Preloaded HP Laptop.

 

[sudhi_shrivatsa]

Its a buisness edition. Please read my threrad carefully " When the same user
is made member of local admin gropup of the Vista box, it
logins perfectly." I mean to say after joining the domain the user is made
member of the local laptop admin group. User can logon to domain
successfully.

Sudhi...

 

[Kerry Brown]

A vista box is joined to a WIN2K Domain. When a normal user is made logon
for
the first time it simply hangs in between and gives. Windows Mail error
with
OK button. After that nothing happens. Even after trying with diff users.
When the same user is made member of local admin gropup of the Vista box,
it
logins perfectly.

SO I thought it is ACL problem with the prfile folder i.e, \users\username
and updating registry for the first time.

I changed all the ACls to full control for the user and then tried again
but
in vein. Can somebody help this out.

Domain: WIN2K AD
Vista BOX: Preloaded HP Laptop.

It sounds like something in your logon script requires local admin
privileges. Try disabling any logon scripts. If this works then you'll have
to troubleshoot the script to see what is causing the problem.

 

[sudhi_shrivatsa]

Kerry,

No logon script per user or laptop is set. Its a just a logon nothing else
happens in the background.

Sudhi...

 

[Kerry Brown]

Do you have UAC turned off? What is the error you talked about in your first
post? Are there any errors in the event logs?

 

[sudhi_shrivatsa]

Hmmmm No UAC is not turned OFF. Let me explain you the whole process once
again.
Installed Vista on Laptop>>> Joined it to a Domain with Domain Admin
credentials.>> Joining to domain was success>> Rebooted, Domain admin login
successfull.>> Now Loged OFF and tried to login with a Domain User Account>>
Welcome Preparing Desktop Message>>> Windows Mail Errro>> NO further
activity>> Desktop did not appear.

Thats the problem.

Now why I thought its a ACL problem? When I logged in withh Local Admin and
browsed users folder there was no %username% folder was created. >> then I
made that perticular domain user the member of Local Admin group(Laptop Built
in admin Group)>>>Voila The Domain User account login successfull.

Now why cant a normal user login?

Hope @least this time I am clear.

Cheers,
Sudhi...

 

[Kerry Brown]

I suspect something is running on login that needs admin privileges. Are you
pushing out any applications with group policy? Domain Users do not have to
be local admins.

 

[sudhi_shrivatsa]

Suspecious? rt But let me clear you this point the DC has never gone in a
change for the last 2years. I have checked there's nothing which is running
during logon.

Sudhi

 

[Joe Morris]

[Vista system hangs at initial login of a domain account]

I suspect something is running on login that needs admin privileges. Are
you pushing out any applications with group policy? Domain Users do not
have to be local admins.

Questions to the OP:

* Has *any* Vista system been successful in logging on a nonprivileged
domain user after being joined to the domain?
* Have you tried logging in with a different domain account?
* Have you talked to the domain administrators? Your computer and/or userid
may be in an OU that's being pushed a non-Vista-compatible executable the
failure of which causes a deadlock in an unprivileged environment.

Alternatively, were any application installations done on the computer after
Vista was installed? An application with an entry in Active Setup and/or
Run/RunOnce in the default user configuration might be doing something
requiring privileges and hanging if they aren't available. Have you
considered setting the machine to audit privilege requests? And even
without the audit logs, have you examined the event logs to see if something
interesting was written?

Joe Morris

 

[sudhi_shrivatsa]

Had done all this but no avail. There are other Vista Boxes and laptop which
are running smoothly. Although they were installed a year ago. Same
configuration and same install procedure was used. No change @ all. All were
using the same domain. No ou level policies are set here.
It gives Windows Mail ........(ole32.dll) failed. And then just stops @
that. I suspect that it fails while setting the personlised settings when a
user logs in for the first time. If made to login with admin prevlgs it logs
perfectly.

Sudhi...

[Vista system hangs at initial login of a domain account]

I suspect something is running on login that needs admin privileges. Are
you pushing out any applications with group policy? Domain Users do not
have to be local admins.

Questions to the OP:

* Has *any* Vista system been successful in logging on a nonprivileged
domain user after being joined to the domain?
* Have you tried logging in with a different domain account?
* Have you talked to the domain administrators? Your computer and/or userid
may be in an OU that's being pushed a non-Vista-compatible executable the
failure of which causes a deadlock in an unprivileged environment.

Alternatively, were any application installations done on the computer after
Vista was installed? An application with an entry in Active Setup and/or
Run/RunOnce in the default user configuration might be doing something
requiring privileges and hanging if they aren't available. Have you
considered setting the machine to audit privilege requests? And even
without the audit logs, have you examined the event logs to see if something
interesting was written?

Joe Morris

 

[Kerry Brown]

I agree with Joe about the logs. If you get an error message there should be
an event logged.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/

Had done all this but no avail. There are other Vista Boxes and laptop
which
are running smoothly. Although they were installed a year ago. Same
configuration and same install procedure was used. No change @ all. All
were
using the same domain. No ou level policies are set here.
It gives Windows Mail ........(ole32.dll) failed. And then just stops @
that. I suspect that it fails while setting the personlised settings when
a
user logs in for the first time. If made to login with admin prevlgs it
logs
perfectly.

Sudhi...

[Vista system hangs at initial login of a domain account]

I suspect something is running on login that needs admin privileges. Are
you pushing out any applications with group policy? Domain Users do not
have to be local admins.

Questions to the OP:

* Has *any* Vista system been successful in logging on a nonprivileged
domain user after being joined to the domain?
* Have you tried logging in with a different domain account?
* Have you talked to the domain administrators? Your computer and/or
userid
may be in an OU that's being pushed a non-Vista-compatible executable the
failure of which causes a deadlock in an unprivileged environment.

Alternatively, were any application installations done on the computer
after
Vista was installed? An application with an entry in Active Setup and/or
Run/RunOnce in the default user configuration might be doing something
requiring privileges and hanging if they aren't available. Have you
considered setting the machine to audit privilege requests? And even
without the audit logs, have you examined the event logs to see if
something
interesting was written?

Joe Morris

 

[sudhi_shrivatsa]

I do agree I have asked them forward the log to me. I will update then.
Sudhi...

I agree with Joe about the logs. If you get an error message there should be
an event logged.

--
Kerry Brown
MS-MVP - Windows Desktop Experience: Systems Administration
http://www.vistahelp.ca/phpBB2/

Had done all this but no avail. There are other Vista Boxes and laptop
which
are running smoothly. Although they were installed a year ago. Same
configuration and same install procedure was used. No change @ all. All
were
using the same domain. No ou level policies are set here.
It gives Windows Mail ........(ole32.dll) failed. And then just stops @
that. I suspect that it fails while setting the personlised settings when
a
user logs in for the first time. If made to login with admin prevlgs it
logs
perfectly.

Sudhi...

[Vista system hangs at initial login of a domain account]

"Kerry Brown" wrote:

I suspect something is running on login that needs admin privileges. Are
you pushing out any applications with group policy? Domain Users do not
have to be local admins.

Questions to the OP:

* Has *any* Vista system been successful in logging on a nonprivileged
domain user after being joined to the domain?
* Have you tried logging in with a different domain account?
* Have you talked to the domain administrators? Your computer and/or
userid
may be in an OU that's being pushed a non-Vista-compatible executable the
failure of which causes a deadlock in an unprivileged environment.

Alternatively, were any application installations done on the computer
after
Vista was installed? An application with an entry in Active Setup and/or
Run/RunOnce in the default user configuration might be doing something
requiring privileges and hanging if they aren't available. Have you
considered setting the machine to audit privilege requests? And even
without the audit logs, have you examined the event logs to see if
something
interesting was written?

Joe Morris

 

[Joe Morris]

I do agree I have asked them forward the log to me. I will update then.

Um...just to make sure we're on the same page: the event logs that are most
likely to help are the ones from your Vista machine, not from the domain
controllers. Your note sounds like "them" means the domain admins since
your earlier postings suggest that you've got the machine in front of you.

Joe