G
Guest
Over the weekend I had to create a new domain for my company as I added 2 win
2003 servers (one of them exchnage 2k3) all because i couldn't join them to
the current domain because at one time i had a 2000 SBS server and because of
that it kept crashing the 2003 servers, even though it is no longer in the
domain (really lame). Anyways my TS was a DC, and I demoted it and dcpromo'd
it into the new 2003 domain. Well now the TS server will not allow anyone
but admin groups to logon interactivly. I have added all the groups that i
had in the old GPO in to the 2003 GPO, plus I added the appropriate one's for
2003 GPO. Also when i try to view the GPO from the 2000 TS it give me many
errors about truncating the strings for the different policy's. As for
tomorrow users are all members of Domain Admins so they can log into work but
i cannot leave it that way, especially since they can shut down the server,
not to mention all the other security problems that presents. Any help on
this matter would be greatly appreciated.
2003 servers (one of them exchnage 2k3) all because i couldn't join them to
the current domain because at one time i had a 2000 SBS server and because of
that it kept crashing the 2003 servers, even though it is no longer in the
domain (really lame). Anyways my TS was a DC, and I demoted it and dcpromo'd
it into the new 2003 domain. Well now the TS server will not allow anyone
but admin groups to logon interactivly. I have added all the groups that i
had in the old GPO in to the 2003 GPO, plus I added the appropriate one's for
2003 GPO. Also when i try to view the GPO from the 2000 TS it give me many
errors about truncating the strings for the different policy's. As for
tomorrow users are all members of Domain Admins so they can log into work but
i cannot leave it that way, especially since they can shut down the server,
not to mention all the other security problems that presents. Any help on
this matter would be greatly appreciated.