-----Original Message-----
I appear to be locked out of secondary accounts...when I
go to switch user and then click on one of the other
accounts the page just refreshes and will not enter the
account. I even tried deleting the other accounts and
starting new ones but still cannot lot onto any secondary
account. Please help. Thanks
.
Have you been making any user admin changes in the Policy
Editor or User Group membership changes?
Check the User Account Group Membership first:
Log on with your Primary account (the one that works)
then go to settings > Control Panel > Administrative
Tools > Computer Management > System Tools > Local Users
and Groups > Users
In the right hand pane, select one of the secondary
accounts (the one that won't log on) by double clicking
it and then click the Member Of tab. Take a note of the
groups to which the account is a member. If it doesn't
belong to any groups, there is your trouble straight
away...skip down a few lines to "The Other Option" to
find out how to add a user to a group...otherwise
continue from here....
Now Check out your security policies:
Go to Start > Settings > Control Panel > Administrative
Tools > Local Security Policy > Security Settings > Local
Policies > User Rights Assignment.
In the right hand pane look for Log on Locally. Ensure
that the group to which your secondary account is a
member is also listed in the Log on Locally Security
Settings. If it is not, either add the group to the Log
on Locally setting by double clicking it > Click Add
Users or Group... > Click Object Types and make sure the
Users and Groups check boxes are checked > Click OK >
Click Advanced > Click Find Now button > Select the Group
you need to Add > Click OK > you should see the group in
the window now > Click OK again > Click OK to close the
Properties Window....or....
"The Other Option" is to add the Secondary User Account
to a local group that is already a member the Log on
Locally Policy. To do this, go back to the Window that
you opened previously for Computer Management and click
on the Groups folder. In the right hand pane double click
on the group you want to make the account a member of >
Click Add > Click the Advanced button > Click the Find
Now button > Select your secondary user account from the
list > Click OK > you should see the user in the window
now > Click OK > Then Click OK again to close the
Properties Window.
NOTE: Choose your secondary accounts Group Memberships
wisely depending upon who is likely to have access to
your machine - Administrators can access everything by
default with full permissions - you may require this, you
may not. However, members of the Users group may not have
all the access you require. It is up to you and I can't
second guess your requirements.
Now try logging off and logging on again as the Secondary
Account.
Hope this helps,
Chavy.
