Over 1 million tech questions and answers.

Denying Certain domain users from accessing a computer?

Q: Denying Certain domain users from accessing a computer?

I have around 50 people in a domain at my work.. how do I stop anyone from accessing my bosses computer over the network?

He is running XP

Preferred Solution: Denying Certain domain users from accessing a computer?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Denying Certain domain users from accessing a computer?

The Windows XP firewall running with "No exceptions" should stop everyone. If by "anyone" you meant selected people accessing but others not there probably is no way. It's probably XP Pro, so file permissions could be used to restrict file read or write access to only those who know the permitted username(s)/password(s).

This response is from somebody who doesn't know domains, so there may be other methods.

Read other 3 answers

Hello Everyone,

I was wondering if there is a way to track which users are accessing files on the network.

For example, Bob has access to the sales folder, he opens a document called sales.txt.

Is there a place where this info is logged? Can I see when he accessed the file?

I am workin in a windows 2000 domain.


A:Windows 2000 Domain--Tracking users and which files they are accessing?

I did find an auditing feature under the folder properties.

You right click the folder that you want to monitor and select properties, security, advanced, auditing, then add the user that you wish to monitor.

The results are listed in event viewer, under the security section.

I guess this does accomplish what I am asking, but it seems very tedious.

I'm still up for better suggestions.


Read other 1 answers

Hi everyone!
Noticed, that if I try to access a shared folder located on domain computer from non-domain computer, typing \ \ computername\sharename, pop-up authentication window appears after some time (30-80 sec). But, if I type \\computername  without pointing
sharename, pop-up authentication window appears instantly.
If I run created shortcut for this share - pop-up authentication window appears instantly.
I can easily reproduce this problem, it appeared on all machines I was testing.

Can it be fixed somehow? In my scenario, I can not use net use cmd.

Read other answers

Microsoft begins denying updates to some Windows 7 users

Microsoft this week began blocking Windows 7 and 8.1 PCs equipped with the very newest processors from receiving security updates, making good on a policy it announced but did not implement last year.

But the company also refused to provide security fixes to Windows 7 systems that were powered by AMD's "Carrizo" CPUs, an architecture that was supposed to continue receiving patches.

The decree that led to the update bans, whether allowable or not under Microsoft's new policy, was revealed in January 2016, when the company said making Windows 7 and Windows 8.1 run on the latest processors was "challenging." Microsoft then ruled that Windows 10 would be the only supported edition on seventh-generation and later CPUs and simultaneously dictated a substantial shortening of support of both editions.

The biggest impact was on Windows 7, because it had become the standard in enterprises -- Microsoft's most valued customers -- with deployment shares far north of 50%. According to Microsoft, Windows 7 was to be fully supported on sixth-generation processors -- Intel's were dubbed "Skylake," AMD's included Carrizo -- until July 17, 2017. At that point, some Skylake-equipped PCs would continue to receive some security updates; other such PCs would get nothing.

Microsoft later walked back the cut-off, first by extending the end-of-support date to July 2018, then by repudi... Read more

Read other answers

I have joined a computer (PC1) to a domain control server (2008), and user able to login using their domain user account - although recently I have found out that even though the computer (PC1) do not connect to a server, user still able to access using their domain account.
Is there a way for me to restrict domain account user from accessing the computer (PC1) if they are disconnected from server?
Hope my explanation make sense to you guyz.

Thank in advance

A:Prevening domain user from accessing Computer

Lots to be considered. Joining a domain is intended to give the company admin configuration control of all the company users.
This is normal, expected and even proper for the company to do this.

restrict domain account userClick to expand...

hmm; only the company admin should be able to do this and almost always it is done using some scripts, NOT by loggin into your PC. So - - who is accessing your PC remotely, the admin - - how do you know this occurs?

PCs joined to a domain usually get a replacement for PC Login - - the network form and that creates a link to the domain controller.

Read other 1 answers

What does it mean (in layman's terms) when you see this message in ATA?
<computer A> was queried by one or more users from <computer B> using SAMR against <domain controller> 
I am seeing this every four hours in our network/domain. 

Read other answers

Is there a simple way of re-joining the computer to the domain?

Read other answers

Hi I want to pull the remote users media player history on domain computer. I have searched every where couldn't any useful information regarding this topic and I contacted the Microsoft Pro support and they have forwarded me to here to ask question.

Can someone please help me the upper issue. 
Thank you,

Read other answers


Please note that I have a domain user with a laptop, then someone else from the same domain logged on and it created a profile. I tried to delete it to free up disk space. I logged off all users and disconnected the laptop from the network. Then I logged on
with a local admin account, went to start, right click on computer -> properties, advanced system settings, settings for user profile and selected the profile and clicked the delete button.

This window told me that user was using ~60GB however after I clicked delete, I noticed my C drive space did not change. Please help. I also checked in control panels, user accounts and that profile name is no longer there. I also checked the HKEY_Users and
HKEY_Local_machine->software->microsoft->windows NT->current version->profile list and that user is not there.

I am very low on disk space ~10GB left and wanted to delete that profile to free up space as that person has their own computer.

Read other answers

I have PCs sitting in a shared area and I would like to prevent users from different domain to logon to my computers. How do I do that with GPO? I searched internet and they suggested "Deny logon locally" I don't think that applies to
my case. Said, my users from DomainOne, I don't want users from DomainTwo, DomainThree, etc to logon and use my department computers.

Thang Mo

Read other answers


I'm using Windows 7 Home Premium x64, IE9, with Comodo Firewall and HIPs, Avast AV, MBAM, EMET and SAS.

I have one LUA and one Admin a/c, both strong passworded---Guest a/c is disabled, Real Administrator is enabled, passworded, and never used. I'm behind a router with no network or file & printer sharing and have all recommended blocks on my firewall.

I've just replaced my admin and lua accounts after finding a lot of null sid logon fails at all my accounts over a few months. It might have been a self-snafu, but I seem to have cured the issue. All except Type 3 Anon Logons at every boot, but i read somewhere that too can be a snafu. I'll keep an eye on them.

Meanwhile, eventlog showed my old accounts being removed from a 'no name' global group that had the Domain users group sid S-1-5-21-*-*-*-513. The new accounts were both added to this 'no name' global group. I'm a workgroup pc, not domain.

Home premium doesn't have secpol and I can't get NET command to enlighten me on this domain group. Should I have any global/ domain groups?

Finally, Is there a way to enforce 'Do not allow enumeration of SAM accounts and shares from the Local policy' or disable 'Network access: Allow anonymous SID/Name translation' or equivalent on Win 7 Home Premium?

A:Domain users group - no domain?

Good grief, I am afraid after just reading all of this. I recommend keeping only your windows built-in firewall, but its up to you.

Do you go to some heavy virus-infected websites a lot? All you really need for a home computer is something like MSE. MBAM is great to use with it as well. If you have more than one antivirus, chances are they will begin to conflict with eachother. update and scan for viruses, and if there aren't any, relax. DO you do things on your computer that require top notch security?

If you are looking for better, you might start looking into paying for a AV. google best antivirus to find reviews on different ones.

Windows itself has ways of locking down your computer, such as bit-locker.

Read other 9 answers

Hello, my computer when ever i turn it on normaly, after it goes past the windows loading screen it will go blue say there is hardware not installed properly, you get the drill, so i went into safe mode, (what im running the PC in right now) 2 windows poped up when i logged into the administrator account saying "found new hardware", Video controler and video controler (VGA compatable). i then ran 3 differnt virus busters, one after the other but for some reason only one of them worked, the other 2 closed down after 2 minuites of being up and from there kept saying it was corupt or that i didnt have suficient permtion to open it. after that i went into the device manager to look for the not working/installed devices when yes, 2 devices called Video controler and video controler (VGA compatable) were yellow question marks with a black exclmation mark in the corner if their icons. i tried to update them and both of them said "drivers not found on computer". so i tried uninstalling them and reseting the PC but it didnt help, so i went back into safe mode to find they were back and were still saying "found new hard ware"

my PC specs are,
Microsoft Windows XP
Home Edtion
Version 2002
Service Pack 3

Pentium(R) 4 CPU 3.00GHz
2.99GHz, 1.00 GB or RAM

I dont know who the manufacturer of the video controlers are or who there installed to. If anyone has any idea what to do from where i got stuck and let go, please tell me.

Thank... Read more

A:Hardware denying computer acces

Please post your system specs, To include Make and model System if Big Box, or same info for the following it custom or home built, Mother Board (including Revision number), Processor (Exact Model Number), Ram, Video Card, Hdd(s), Optical Drive(s), Power Supply Manufacturer Model, Wattage and Amperage on the +12V Rails, OS, and any other peripherals installed on the motherboard.

Read other 2 answers

Using Win 7 Pro on Dell Latitude D630. I joined my domain and completed all
Windows updates. I can access internet as long as I am logged in as administrator,
but when logging into the domain as any other user, IE9 remains when blank.
I have switched from a static ip address, to a received DHCP address but to no avail.
Am I overlooking something? Many thanks!

A:Accessing internet from domain

Quote: Originally Posted by jef231

Using Win 7 Pro on Dell Latitude D630. I joined my domain and completed all
Windows updates. I can access internet as long as I am logged in as administrator,
but when logging into the domain as any other user, IE9 remains when blank.
I have switched from a static ip address, to a received DHCP address but to no avail.
Am I overlooking something? Many thanks!

This may be due to the Domain's GPO settings which can be used to prevent anyone with a non admin account any access to the network.

The obvious solution is to add the new User to the Admin group by going to Computer Management>System Tools , then add the new User to the Admin group.

Read other 1 answers


Well I can use my very own laptop at work ... but they tell me that WinXP Home can not access a "Domain Network"....

Is that true. My only recourse is to move to XP Pro?



A:Accessing Domain Network

Yes that is true. You cannot add Windows XP Home machines to a domain.

Read other 1 answers

This is so annoying, I have setup a Windows 7 computer at a remote place and now I can't really access it.

It has the latest version of TightVNC installed but it only asks for password and then "gracefully closed the connection" (something like that).

Filezilla FTP server is installed and I have full R/W access to all drives incl C:, to this I can connect just fine.

No-IP service is running on it so I can find it's IP.

- Can I reboot the computer somehow?
- Can I restart the TightVNC service somehow?
- Can I install and run another VNC software?
- Can I activate a command shell, or windows own remote desktop?
- Can I run commands with FTP commands?
- Can I change or remove a Windows system file to make it reboot?
- Anything?

Some ports are open, such as some FTP & PASV ports, the VNC port, 990 might be open (but I disabled secure ftp features since I couldn't make it work).

Later this week my brother can reboot it manually but at this moment no one is at that place.

I don't want to shut it down, I need it rebooted or TightVNC restarted. Or somehow manage to connect to TightVNC (never had any trouble with TightVNC before but this was the last time I'm using it I'll say).

A:Need to reboot remote computer, VNC is denying access, I have full R/W FTP

1) If you don't have the correct username and password, TightVNC "gracefully closes the connection".

2) FTP doesn't include a "reboot the computer" command.

Read other 5 answers

I have replaced an NT4 primary domain controller with a 2003 server. I still have an Nt4 server as an application server and as a Backup Domain Controller. It has been running fine until I add a new user that was never in the old domain.
Any new users that get added cannot authenticate to the NT4 server. All the previous users were already in the BDC when I change over. I cannot figure out why. I can authenticate as Administrator and any old users. I have sp6a loaded, someone said this would help, and have even added the new users to the Domain Admin group but still nothing. I cannot upgrade the Nt4 server as the application is an ERP system that is run throughout the company and I am told will not be supported in anything other than the NT environment.

If I add users on the NT first, it updates the PDC just fine but I still can't access the shares.

Any Ideas???


A:accessing NT 4 server in a 2003 Domain

Try demoting the NT4 server so it is no longer a DC and integrating it through DNS into your network.

Because your NT4 server is PDC, there is alot to do in order to keep the NT4 server as a DC and integrate it into a Server 2003 Schema AD network.
It is really not worth doing to be honest! Your NT4 server should run fine as a server, but not as a DC within your Server 2003 environment.

Read other 2 answers

I am not sure which forum this belongs in: Win XP, Linux, or networks, but I will start with this.

After some recent changes, we have a problem with access to domain services such as e-mail only by users with administrative privileges. These same services could be accessed by any user or power user in the past. I will try to be brief in describing the network and the equipment. I am an assistant administrator for a sub-network in a retirement community that has other networks for office, personnel, health-care, etc. needs. Our network consists of five Win XP computers networked to a separate server machine running on Linux with a SAMBA interface that provides IMAP e-mail service, full internet access, and full inter-communication between the five resident computers so any one of them can be used interchangeably by users. We have about 150 residents registered but only a fraction of those use the computers regularly. After replacing an older server program that broke down from time to time, with a new one, and replacing our former Win 2000 computers with Win XP, we started having problems with network access. At present, when we register a new userID and password, we logon to the new account and change the My Documents folder from its default C:\Documents & Settings location to a mapped shared server drive (named H: ) through which all users can communicate from any computer, so that it is now H:\My Documents. The computer asks if we wish to transfer all settings to the n... Read more

A:Administrator privileges required for accessing domain

Note to Forum administrator. I would like to close this thread and move it to the Other Software thread instead. Can you do this for me.

Read other 1 answers

I have 2 accounts and when on account A, I can view account B's documents.

With XP you could make files private so this would not happen.

How do I do this with windows 7 pro?

A:accessing users folders

Select the account B's document folder, right-click, share with, select nobody.

Best regards,


Read other 7 answers

I've installed Windows 7 Home Premium 32-bit in a dual-booting system alongside Windows XP SP3 (also 32-bit). It was a clean install of Win7.

My data - ie, documents, music, pictures, etc - is stored on a second hard drive and, after installing Win7, I relocated its documents, music, pictures, videos and downloads folders to the relevant locations on the second hard drive so that this data could be accessed from both Win7 and WinXP.

Trouble is, when go back into WinXP and attempt to open one of these folders, say the music one, a box pops to tell me that "D:\Steve\My Music is not accessible. Access is denied."

It would appear therefore that Win7 is locking these folders in some way or other.

To see if it made a difference, I went back into the properties of the music, pictures, etc, folders in Win7 and switched them back to the default location, which is of course on the C-drive.

Rebooting into WinXP, however, I found that the folders were still inaccessible.

How do I configure Win7 so that my data folders are in the location I want without also preventing my other operating system from being able to access them?

I've no wish to set up a network throughout the house; I just want to access these folders on the same machine whether I'm using Win7 or WinXP.

A:Win7 denying access to data holders in dual-booting computer

When you are booted into XP is the D: drive really where the data is or is it the partition containing Windows 7? If the latter you cannot access "My Music" because it is some kind of place holder to make some older applications work; you should be able to access D:\Users\Steve\Music.

If D: really is the data drive, did you store your music with that identification? Is Steve also your user account on the XP machine?

Read other 2 answers


I am using a domain-joined laptop with Windows 7 Professional at work. Now I am trying to integrate it into my home network (which consists mainly of a Windows XP Professional SP3 desktop).
After enabling a guest account and sharing on the WinXP machine, I am able to access shared folders on the WinXP desktop from the Win7 laptop (which is not too bad).

However, I was not able to access shared folders on the Win7 laptop from the WinXP PC, not even after enabling all advanced sharing features and disabling the firewall. Both using the computer name \\HAL and the IP address \\ gives me a "Windows cannot find..." error. Pinging the Win7 laptop works though.

I wouldn't like to leave the domain to join the local workgroup and am not desperate enough for a dual boot installation or other major work-arounds I have come across (especially since sharing the other way around works). But maybe some of you guys have a suggestion what else I could try.

Thanks a lot for your help.

Read other answers

Does anyone have any idea how to block users from accessing certain folders (IE: Program Files). I can block access but then the program(s) won't run. I just don't want users snooping around the computer. So I would like to block them from viewing folders in windows explorer and even internet explorer. Maybe even password protect the folders. Any ideas?

A:Block users from accessing folders

right click on the folder under sharing tab check make this folder private. Then windows will ask you if you want to put a pw protection too, click on yes and proceed.


Read other 3 answers

I have a hplaptop with windows 10, i created one administrator account, but I keep finding files that show several users. I think that I may be hacked by a remote user? I am looking for advice in resolving this..thanks

Read other answers


I try Windows 7 with our environnement which is based on Windows 2003 SBS.

I have created a user on this server and i try to connect my test computer on this domain.

It recognizes the domain.

I have created the username on my PC with the short method (user in control pannel) and with ProfWiz. User is recognized too.

I restart the PC and i try to connect with the correct user. Username and password are correctly checked but i have already the message 'You have been logged with a temporary file'. Then a can't really organize the PC.

Someone can help me ??

Thanks and regards.

PS : I'm not englishspeaker then sorry for the message and fauts.

A:Windows 7, users and Domain

Quote: Originally Posted by EricF

'You have been logged with a temporary file'. Then a can't really organize the PC.

Hello and welcome.

Why not log on as a local user to configure the PC (rather than a domain user)?

If you want to log in as a domain user then you should first create that user on the domain controller.

Can you attach a screenshot of the user profiles? (computer > properties > advanced > user profiles > settings)

Read other 3 answers

Windows Server 2003. I want one shared folder on the server to be visible to only one group of users. When I created the foler, it seems to have come with settings that make it visible to all users and all users have read&execute privileges. The security tab does not see to permit removing these users so I can resttrict access to a single group.

What am I missing?

Read other answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: Domain users

You would be better posting this in the networking forum for a better response!

Read other 2 answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: domain users

BigC said:

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with ADClick to expand...

Hi BigC,

It sounds like you need to create a "Power Users" Group for them. All I know is that WinXP Pro has this category of user which is like a restricted Admin, but I don't know for certain if it is available for a windows 2003 domain with AD (perhaps).

-- Tom

Read other 3 answers

Hi. Sorry my language i am from Portugal, and is the first time i post in this f?rum!

I have a question!

I working with several computers in a domain! After restarting before installing the operating system again, I was wondering how do I set the same profile for all profiles!
In windows XP configured a profile with a user, and then put it in the default user folder!
In Windows 7 I have no idea!!!

Any ideia?

A:How to have same profile for all users in the domain!

Hi WildCatPT, welcome to the Seven Forums.

Windows 7 default user profile must be configured and customized in so called Audit Mode when no user profiles exist. In your case, deploying the same image to several computers, the procedure is as follows:Start Windows 7 installation on your reference computer
After installation boots to OOBE / Welcome mode after last reboot, enter Audit Mode
Customize the default user profile
Generalize the Windows image with Sysprep
Capture the image
Deploy the image (install to other computers using the captured image)

See this tutorial for instructions in customizing Windows default user profile in Audit Mode: User Profile - Customize During Installation.

Notice that as this tutorial is made to show how to customize default profile in just one computer as opposite to your need to do it for several computers, you need to change the /reboot switch in Sysprep command told in Step 3 to /shutdown switch in order to be able to capture the image before any user accounts have been created.

In your case, the Sysprep command told in Step 3 must look like this (changed part highlighted):

%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /unattend:E:\DefaultProfile.xml
More complete walkthrough tutorial for preparing a Windows image for deployment, including default user profile customization: Windows 7 Image - Customize in Audit Mode with Sysprep


Read other 1 answers

Self explanatory.

What are the specific steps to take in order to map, say, 3 drives to all domain users when they logon. I have seen a few pages and they are all different, so if anyone has the exact script or steps (not a link) that'd be awesome. Going to sites and getting two or three different instructions is frustrating. It is a windows 7 environment on 2008R2.

Read other answers

So we have this puzzling issue.  We have an SharePoint site that works for some/most people but not everyone.
We are trying with IE11 (latest version).  We have also looked at trusted sites and compatibility view (they are the same for users that work and don't work).
For ones that it does not work, they seem to get this message when they browse to the webpage:
"Only secure content is displayed"
The issue they get is when they fill out a form (with a Captcha at the end) and try to submit it.  They get this message:
System Error: The Web application at <https://...> could not be found. Verify that you have typed the URL correctly. If the URL should be serving existing content, the system administrator may need to add a new request URL mapping to the intended application.
For those users with the issue, we have tried different browsers, Chrome, Firefox and Edge (for those with Windows 10).  The only one that it works with is Edge.
Now the strangest part is that if we open the website in Edge, and then from Edge open IE, we can submit that form correctly.
Does anyone know what the difference is between opening IE directly and opening IE from Edge?  Maybe that can help us figure out how to address this issue.

Read other answers

I wanted to block another user on my home network from accessing the internet. The user, uses a desktop which is linked via ethernet to the wireless router, and my laptop is connected wirelesly..

Is there a way i can do it?

Im using a belkin54g router..


A:Blocking users on a netowork accessing the internet.

Read other 12 answers

Hi there,

I am trying to access the current logged in users full name from XP for example, When the user logs in they type jbs10 and the users name is (John B Smith) on the XP login screen. I need to access this information so that I can store the users name in a database. I preferably need to access this information through scripting or VBA etc.

Thanks in advance.


A:Accessing Current Logged in Users full name

Read other 10 answers

I have 2 users on my computer. It works nice to keep all my junk seperated from everyone else but the problem is whoever was logged on 2nd cannot see any files in the DVD-RW drive (D) and with he regular DVD drive (E) I get the E;\ is not accessible message. To use these 2 drives I have to be logged on first or I have to log off the other user or I just have to access it as the other user.

Thanks in advance,

A:Problems accessing dives with multiple users

Hmm I guess this isnt a common problem.

Also... the title is supposed to say "drives" instead of "dives" Unfortunately i cant edit it.

Read other 4 answers


I have a setup in a restaurant.

I'm connecting several screens with Ethernet cables and connecting them via vpn to a remote office (HQ) for controlling the contents of the screens, the vpn connection is working and HQ admin can monitor and control the screens, BUT:

In the same time the restaurant is offering wifi connection to his guests using the same network.

I want to prevent the wifi users to ping or see the Ethernet network.

The router I have is Linksys E1000 which is connecting to internet service provider line and gives internet to wifi and Ethernet.

The next problem that I want to solve:
when there are many guests using the wifi the vpn connection became slow because the most bandwidth is utilized by wifi users, how can I give a limited bandwidth to wifi users and save 60% e.g. of the bandwidth dedicated to ethernet network which the vpn is using it.

The vpn HW is IPTL 71 for the restaurant, and IPTL 78 for the remote office (HQ).


Read other answers

Good day

I was always under the impression that people who guest account is unable to access the administrator desktop and hard drive etc.

Is there that i can make sure that this doesnt happen again.

I am using windows 8 64 bit


A:How to prevent guest users from accessing the administrato

By default anyone using the guest account would be unable to access the desktop or files of any other account. This is by design. The rights of the guest account are the lowest of the low.

If the situation seems otherwise you need to fully explain.

Read other 4 answers

Can anyone tell me how i can allow my Win2K domain users to add local printers to their XP Pro workstations? I've tried eveything I know in local machine accounts and domain GPO security and nothing works. I cant believe that there's not a way to do it, but Im about ready to give up. If the local users can add network printers, why should it be so difficult to add local printers?

thanks for any suggestions...

A:allow domain users to add local printers

I think giving your domain user administrative right will solve the problem.

Read other 1 answers

I have an application that requires my users to add a registry entry each time they enter the program. The easiest way I figured to do that was to give all my users administrative privileges on each Win2000 machine. The problem is they log on to a domain, and I'm having to enter like 50 user IDs individually on each Win2000 machine. I have us in a group in the WinNT domain, but I can't find anywhere on the Win2000 PC to add a group from the domain. It's just time consuming and thought I'd see if anyone knew of an easier way.
This was hard to explain...hope it's half-way clear.

A:Adding Domain Users As A Group

Read other 6 answers

I have a customer who is moving off a domain to a workgroup. Is there a easier way to move there domain profile over to the local profile? I have already started creating the local profiles but would like to avoid moving data and reconfiguring there pop email in outlook and mapped drives. Thanks in advance.

A:Moving users from domain to workgroup

Google Data

Read other 2 answers

Okay I have been making User accounts for awhile but i have a question when it comes to this one. When I copy a user account I get the same groups and permissions. Okay fine and dandy. If not and I make a new user I only get the Domain\Users group then have to manually add in the other groups. Is there any way to change this functionality to add more groups on creation without resorting to copying?

This stems from the deny local login question I posted. I can deny login by a global group but then this means every new User ID HAS to be in that group or else it won't deny the new hires.

E.G. I set the local setting for the front desk PC's to deny log on locally for anyone who is in the Non-front desk global group. This means all users currently on our domain has to have this global group added to their user account except the ID's we want to log in. This also means all new creations should have this by default.

A:Way to tell Domain users what groups to start off with.

maybe a windows script. I have done those before. I can see if I still have mine, and if so I will modify it for you and send it.

Read other 2 answers

Hi All

I would like to set the default printer on certain PCs for all users that login.

I have tried a login script using defprint.exe and set it to run on only the selected PCs but does not seem to load my script through group policy?

I am using a Windows 2003 AD domain.
Your help will be much appreciated.


A:Set default pronter all users (domain)

Are you sure that the GP is getting applied at all?

Read other 1 answers

I have an HP Compaq Elite 8300 with a very bare-bones install of 8.1 Enterprise. We have it connected to a 75" Samsung Smart TV and is used to give presentations in a boardroom-type setting. What i am trying to do is set the DPI settings for all users to 150% Whether they have logged in or not.
I found a Technet article saying to change the following registry setting:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles\Current\Software\Fonts

but to no avail.
Any help would be greatly appreciated


Read other answers

I want to install Metro app like Lync and Mail app for all the users, but i cant find any way to install it for all the users. Also i have to login with Microsoft account for installing modern app. How this can be done in automated way because i will use
MDT for deployment.


Read other answers

Hello dear SevenForums-Board

I am looking for a solution to let our Domain-Users recover their passwords on their own. Like on several webpages with the "Forgot your password"-Option.

So I imagine the scenario that the users forgets his password and so he requests a new one by answering to his secret question or by getting the password to his private mailaddress, which he already has addes to his useraccount within the ad.. or whatever^^

Is there such an option?

Thanks for your help and advices

A:Let users in a Domain recover their AD-passwords on their own


Nobody knows if this is possible? I couldn't find something on the Internet..:S

Read other 5 answers

Hi, how can i grant local computer admin rights to the domain users on the same computer? Please help, thanks.

A:admin rights for domain users

Read other 8 answers

All my users in my company domains Complain that they can't see other computers in my other 2 company domain's .I get error messages from 2 of my wins server EVENT ID:4323 WINS: "PULL THRED ENCOUNTERD AN ERROR DURING THE PROCESS OF SENDING
A PUSH NOTIFICATION TO ANOTHER WINS." I have 3 wins servers . 2 of them are in the same subnet 10.0.1.x and the third is located in a difrent location and difrent subnet 10.0.2.x. All the computers run windows 7 .

Thank you'

Michel v

Read other answers

My server is a domain controller thus i cannot add users with admin rights and so i cannot use lusrmgr.msc to add or change... i've added the user i want =active directory>users> and added the user and set it to admin..but when loged onto does not have the admin rights... learned that this was becuiase it was a domain controller

A:Add users to domain controller server

Correct, the DC admin has the keys to the kingdom and can create a user-id with/without admin privs.

Unless the admin is your very best friend, I would expect exactly what you are reporting.

Read other 7 answers

I have a classroom with computers running VB6 on Windows 2000 Pro on a Windows 2000 domain. The members of the DOMAIN USERS group cannot load ActiveX in VB because of permission restrictions default by the Users Group in the Windows 2000 domain environment. If the users are Power Users or Administrators they can develop and run the ActiveX controls with no problem. I don't want to make the users members of the Power Users group because that gives them too many privileges. How can I allow members of the Domain Users Group to run ActiveX control in VB6? What permissions should I modify so that Windows 2000 allows Domain Users to run ActiveX controls without making them Power Users? Thanks....

A:Domain users cannot run ActiveX controls....

Set up an audit on the group and then view the error logs to determine which permissions they are being denied in the security section.

After more thought I think this is more an OS function and definately a security function set up and patched for obvious reasons. I also believe there is no way to get around this restriction.

Read other 2 answers