Nah, I've been swamped fixing broken SBS 2003 servers this week. I'd love to
get my hands on whoever approved an update that breaks domain logon for all
users except admins.
Looks like it is time for me to block all servers I admin from allowing
^any^ updates until I test and approve them. I had gotten slack and was
allowing the regular IT guys on location to load critical updates.
Plain and simple, NO update should ever be allowed to change domain security
policy I have implemented.
I felt bad at the first location as I accused the IT guy of screwing with
permissions, then the calls started rolling in as users logged off at other
locations and were blocked from logging back in.
--
Larry Samuels Associate Expert
MS-MVP (2001-2005)
Unofficial FAQ for Windows Server 2003 at
http://pelos.us/SERVER.htm
Expert Zone-