Domin user being assigned guest priveleges during logon

[Bruce Musgrove]

I have a domin user that, whenever she logs on is being assigned guest
priveleges to the PC. this was determined by running the @priv macro in
kixtart
If I use @enumgroup from kixtart, it shows the following:

Domain\Domain users
Everyone
localPC\SophosA
localPC\SophosU
localPC\Adminis
localPC\Users
INTERACTIVE
Authenticated U
LOCAL
Print Operators

The local guest account is disabled. I have deleted her profile, and even
deleted and recreated her user ID, all to no avail.

We discovered the issue when some JAVA based IE programs failed to install
correctly as she accessed them. I have scanned using Sophos, Spybots and
afdaware and all were clean. Help!

 

[Steven L Umbach]

I would check those local groups on the computer she is logging onto to see
if any of them are in the guests group or have restrictive permissions
assigned to them including deny permissions that could override
administrator permissions. See if it happens to other domain users that
logon to that computer or if she has the same problem when logging onto
another domain computer where other domain users do not have the problem.
SophosA and SophosU could be suspect groups as the other groups, except
print operators, would be expected to be seen by a domain user logging onto
the computer assuming you want the user to be local administrator. Also
check the logs on that computer via Event Viewer to see if anything
pertinent is shown including events for Software Restriction Policies. IE
related applications can fail to install for a variety of reasons depending
on how Internet Explorer is configured which could be via Group Policy or
advanced/security settings, etc. --- Steve