Policy on NT PDC restricts Desktop on 2000 Pro

[cgreen1977]

We have an NT PDC server on out network. We have a few 2000 Servers, none of which are PDC's or BDC's. None of the 2000 Servers are logged into by users, they are purefully for apps that must run on 2k. We have just started using 2000 Professional on out workstation. Whenever a 2k Pro workstation logs into our PDC, the user gets restriced access to control panel and no software installation rights. Even logging into the network as a administrator doesn't work. I confess I know zip about Policys other then their function as we don't use them on our network. I have done a search on the PDC for anything *.pol and found nothing. What could specifically be targeting the 2000 Pro stations?

 

[OzDog]

All policies (especially if they are doing this automatically) should be in the NetLogon share of the Domain Controllers. Check under %systemroot%\system32\repl\import\scripts for an "NTConfig.pol", as this is the only one that can automatically take effect when a workstation joins a domain. Anything else must be manually configured (through registry entries - which can obviously be scripted etc).

You should be able to edit the .pol file with the Policy Editor (poledit.exe).

If it isn't there, then something very fishy going on. Load the Policy editor onto the workstation, open it and then choose "Open Registry." That will show you the current restrictions in effect. You need to be in as an Admin to run this properly.

Let me know the outcome of these... Cheers,
Sam

Please let members know if you found their posts helpful.

 

[cgreen1977]

Sam,

There are no pol files in the netlogon directory. That would just be too easy I will give the second suggestion about loading poledit locally a try.

 

[zoeythecat]

Are there any messages logged in Event Viewer on the Windows2000 Pro workstations?

 

[Mturner]

try creating an ntconfig.pol file and putting it on the nt pdc, and set no restrictions.

HTH Marc Turner
Network Manager

E-Mail: Mturner@turnerm3.fsnet.co.uk

 

[jasonboyes]

I have a question did you join the domain with the 2k pro workstation?