Local Admin disables by its own

[Guest]

Hi All,

Well i am facing this problem for XP clients only. We have 2000 DC and XP
clients. The problem is whenever any user logins to the domain, his local
admin get disabled by its own. This is not happening with 2000 client
machines.

Then we need to login from domain admin user and enable the local admin but
it get disabled eachtime when user log ins to the domain.

Please suggest

Regards
(e-mail address removed)

 

[Steven L Umbach]

What do you mean that his local admin is disabled?? Is not the user logging
on with a domain account?? If so I don't understand what the local admin has
to do with anything anyhow. It is possible for the built in administrator
account to be disable by Group Policy but that should have nothing to do
with the domain user logging on. You can open the Local Security Policy on
the XP Pro computer and go to local policies/security policy to check the
security option for accounts: administrator account status . If it is set to
disabled the built in administrator account will be disabled for normal
logon. You can run rsop.msc on the computer to see if it will show what
Group Policy is applying that setting. I also STRONGLY discourage the
practice of logging onto non domain controllers/secure admin workstations as
a domain admin as it can be a HUGE security risk due to malware, scripts, or
keyboard loggers. Instead I recommend that you place a global group that
contains regular domain user account in the local administrators group of
your domain computers to administer them. That can be automated via a Group
Policy startup script using the net localgroup command or using Group Policy
Restricted Groups. --- Steve