IE6 Cant View Secure Web Sites/Cant Print/No Active Desktop

[Michael Curry]

I have a windows 2000 network with ie6 on the clients. I have active
directory installed and working. I have a generic user logon for most
workstations which uses a mandatory user profile.

The server is SBS 2000, using ISA for internet sharing, Office XP is also
installed. Windows 2000 is SP4 with all latest patches applied.

I have a number of problem which I guess are related:

1. When printing any web site from ie (or apps using the mshtml activex
control) a blank page (with just header and footer) comes out of the
printer. Print preview is also blank. I have tried the KB articles mentioned
here and have set the encoding as suggested, to no avail.

2. When a user tried to browse a secured web site, the page can not be
displayed. This is apparant on page where the lock icon would normally
appear in ie.

3. Active desktop cannot be displayed. A message box saying this pops up
when a user logs in. the active desktop page is set to the news page of our
intranet which is displayed immediatly on opening ie, and has no problems
elsewhere.

These problems are all resolved by placing the generic user in the "Domain
Admins" user group. So it is obviouisly some security setting, I have no
idea what.

I have tried re-creating the mandatory profile from scratch to no avail.

Any ideas or troubleshooting ideas would be great...

Thanks

Michael

 

[Gary Mudgett [MSFT]]

You are right the putting the user in the Domain Admins group does suggest
there are registry permission issues. It sounds like the generic user does
not have all the permissions at least to the registry to do what it needs
to.

How are you creating the mandatory profile?

323368 HOW TO: Assign a Mandatory User Profile in Windows 2000
http://support.microsoft.com/?id=323368

--
Gary Mudgett, MCSE, MCSA
Windows 2000/2003 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Michael Curry]

Thanks. Have deleted the template user I originally used to create the
profile and created a new generic profile. This has resolved all of the
mentioned issues.

The only problem is now, the active desktop just displays a blank white
page. It works perfectly in the template user, but in the generic user the
page is a perfectly white space. This must be a caching issue as as soon as
you open the intranet page in ie, you can then right click on the white
space and hit refresh and the page is displayed.

Any links on the desktop do nothing though, until those links have been
visited in ie.

Any ideas?

Thanks for you help

Michael