Recently, we installed a new security template for our domain users. In addition, we deleted the default domain policy prevent to conflicts (Mistake!). We were able to re-apply the default domain policy, which doesn't seem to have anything configured in it. All other group policies have been removed.
Nonetheless, many users who were Power Users of their machines are experiencing major permission/rights issues. First, if you go into the Users/Passwords of the local machine the user's name does not appear. Second, the cmd command does not work. An error will appear saying, access to the specified device, path, drive is denied. The same happens when trying to run the scripts for mapping our network drives. Outlook will not run either for power users. It complains about access right also.
After doing some investigating it seems like users who are Power Users do not have access to any local files without explictly giving them rights. I believe it is a registry problem because new (rebuilt) machines do not experience these issues.
Somehow something in registry was changed to prevent Power Users from having rights to the local machine. When the users are added as members of the Admin group everything works as normal.
Is there a way to restore those rights to that group by making a change in the registry?
Any ideas or suggestions would be GREATLY! appreciated.
thanks!
Nonetheless, many users who were Power Users of their machines are experiencing major permission/rights issues. First, if you go into the Users/Passwords of the local machine the user's name does not appear. Second, the cmd command does not work. An error will appear saying, access to the specified device, path, drive is denied. The same happens when trying to run the scripts for mapping our network drives. Outlook will not run either for power users. It complains about access right also.
After doing some investigating it seems like users who are Power Users do not have access to any local files without explictly giving them rights. I believe it is a registry problem because new (rebuilt) machines do not experience these issues.
Somehow something in registry was changed to prevent Power Users from having rights to the local machine. When the users are added as members of the Admin group everything works as normal.
Is there a way to restore those rights to that group by making a change in the registry?
Any ideas or suggestions would be GREATLY! appreciated.
thanks!
