Local Group Policy Denied - Weird Issue

[TCLiven]

Hi All -

I have a user that can log into one workstation and receives all his policies (local and domain). If he logs into a different workstation, all policies BUT his local policy comes down. This is giving him access to something that he should not have access to. The workstations are in the same OU. I know this is a loaded question, however what would be the best way to troubleshoot this issue? Recreating his local profile did not do the trick. Thank you for your help.

 

[PScottC]

The results you are seeing imply that the local policies on the 2 systems are different. If a domain group policy does not explicitly configure a setting, then the local policy or default setting is applied.

Try setting the "bad" workstation back to setup defaults using the Security Configuration and Analysis MMC. Apply the "Setup Security.inf" template to the machine.

BTW... Don't forget to check if the user is a local administrator or power user.

PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers