Over 1 million tech questions and answers.

How to prevent users from different domain to logon my domain PC?

Q: How to prevent users from different domain to logon my domain PC?

I have PCs sitting in a shared area and I would like to prevent users from different domain to logon to my computers. How do I do that with GPO? I searched internet and they suggested "Deny logon locally" I don't think that applies to
my case. Said, my users from DomainOne, I don't want users from DomainTwo, DomainThree, etc to logon and use my department computers.

Thang Mo

Read other answers
Preferred Solution: How to prevent users from different domain to logon my domain PC?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)


Hi guys, i have a problem, i'm not sure if this issue has been raised or what but here is my problem.My environment:2003 Domain controllerFile and Print server WSUS ServerSQL ServerWindows XP wks2 new Windows 7 wksWhat happens is that when i try to logon to the domain on  the win7 machine as a std user i get error"You cannot log on because the logon method you are using is not allowed on this computer"If i logon with the domain admin account i'm able to logon and also if i make users members of domain admins they are able to logon to the domain. I realy do not believe that this is the way to go because it compromises my network security. Any help will be gladly appreciated.Thanks

A:Non admin users cannot logon to the domain on Windows 7 wks

Symptom: When trying to logon a computer using non administrator ID, you may receive this message: "You cannot log on because the logon method you are using is not allowed on this computer. Please see you network administrator for more details."
Case 1: Group Policy' "Allow log on locally" was not setup to allow users or domain users. To setup allow users or domain users to logon the computer or domain, you need to add the users or domain users to the "Allow log on locally". Please follow these steps to add the users.
1. Run gpedit.msc.2. Expand Windows Settings\Security Settings\Local Policies3. Click on User Rights Assignment4. Ensure that "Allow log on locally" includes Administrators, BackupOperators, Domain Users or Users.
Case 2: Group Policy' "Deny log on locally"  was setup to deny users or domain users. To setup allow users or domain users to logon the computer or domain locally, "Deny log on locally" should be empty or no users or domain users in the list. Please follow these steps to remove the users or domain users from the "Deny log on locally".
1. Run gpedit.msc.2. Expand Windows Settings\Security Settings\Local Policies3. Click on User Rights Assignment4. Ensure that "Deny log on locally" is empty.
Case 3: The local group policy allow user to logon. However, domain group policy which overrides local policy doesn't allow users to logon locally. The re... Read more

Read other 10 answers

Basicaly what i need is a software witch can provide a list with domain users currently logged in and the computer name. .... and maybe the time of login. And if the software is freeware, it's perfect.
Can anyone tell me the name of such software ?

A:Domain users logon monitor tool


Read other 1 answers

Dear sir,

I have implemented GPO  of deletion of browsing data on exit in ACtive directory. after implemented this Group policy, user form data is also deleted. I want to keep the form data of user. One more point, after implementing this policy, old user form
data is not deleted but for new users of domain, it does not give option to save username and password option.

Read other answers


I'm using Windows 7 Home Premium x64, IE9, with Comodo Firewall and HIPs, Avast AV, MBAM, EMET and SAS.

I have one LUA and one Admin a/c, both strong passworded---Guest a/c is disabled, Real Administrator is enabled, passworded, and never used. I'm behind a router with no network or file & printer sharing and have all recommended blocks on my firewall.

I've just replaced my admin and lua accounts after finding a lot of null sid logon fails at all my accounts over a few months. It might have been a self-snafu, but I seem to have cured the issue. All except Type 3 Anon Logons at every boot, but i read somewhere that too can be a snafu. I'll keep an eye on them.

Meanwhile, eventlog showed my old accounts being removed from a 'no name' global group that had the Domain users group sid S-1-5-21-*-*-*-513. The new accounts were both added to this 'no name' global group. I'm a workgroup pc, not domain.

Home premium doesn't have secpol and I can't get NET command to enlighten me on this domain group. Should I have any global/ domain groups?

Finally, Is there a way to enforce 'Do not allow enumeration of SAM accounts and shares from the Local policy' or disable 'Network access: Allow anonymous SID/Name translation' or equivalent on Win 7 Home Premium?

A:Domain users group - no domain?

Good grief, I am afraid after just reading all of this. I recommend keeping only your windows built-in firewall, but its up to you.

Do you go to some heavy virus-infected websites a lot? All you really need for a home computer is something like MSE. MBAM is great to use with it as well. If you have more than one antivirus, chances are they will begin to conflict with eachother. update and scan for viruses, and if there aren't any, relax. DO you do things on your computer that require top notch security?

If you are looking for better, you might start looking into paying for a AV. google best antivirus to find reviews on different ones.

Windows itself has ways of locking down your computer, such as bit-locker.

Read other 9 answers

I have group policy set option 3 (detect updates) for my domain. I tried option 4 (download & install), but this also reboots the computers, including the servers, if no one is logged on. I don't mind if the workstations reboot, but I don't want the servers to reboot.

I don't see any way to accomplish this. Has anyone had success with this?

Read other answers

Hi there...

Is there any possibility to prevent the expiration of domain user password on sundays?


A:Prevent domain password expiration in sundays

Normally the domain admin sets the change password expiration #of days, It also gives you something like
notifying you a few days in advance.

The Admins control that thru their security policy. I don't believe that it can be controlled to prevent expiration
on sunday but you do get a few days notice of expiration of passwords.


Read other 3 answers


1 NT4 server

The problem is when my user logs on as a domain user he cant run some apps, But when he logs on as an administrator it works fine. I made him an administrator on the local PC with the same domain user name and it still wont work. What should I try next?
Windows 2000 profile transfer

Sometimes when I copy a profile from one user dir to another, using system propertys it copys with no problem. When I log out and log back in I get this repated explorer error and it wont stop until I reboot or log out. (If I can do it quick enoughf) The old profle was used as a local. The new profile is a domain profile. Do i need to do any thing to the server?


A:Domain Logon

Which apps won't work? If they were installed under the admin account, they may not work for users. Some apps need to be "re-installed" for each user profile (to load some registry settings in the current user key).

As to the profiles, did you copy a local profile to the server and use it as is for a roaming profile? I have not tried that, but I suspect that the local profile may have used a variable such as "localhost%" or some such that couldn't be translated properly in a roaming profile. Just a guess on that one. Hope it helps, or someone more familiar with profiles corrects me.

Read other 3 answers

I was wondering if its possible to stop using the 'slash' style logon, logoff and lock workstations screens when connected to a corporate domain, in similar style to how NT and W2K worked.

If I recall correctly, in XP if its a member of the domain it reverts to this method and does away with the 'Welcome Screen' as its called.

thanks, Mark

A:Domain logon

don't think this is possible.

Read other 1 answers

I am trying to get vista to recognize a new domain. I had to rebuild the server and created a new domain name. Vista disabled the administrator login when I upgrade to vista and the old domain does not exist. At the login screen the new domain is not recognized even though it is present and working. Any idea’s beside go back to xp pro.

Read other answers

Each time some Domain user (Windows XP) need to take 5-8 mins to login to Windows 2003 Server. does anyone know why,, ? we apply only 3 group policy to GPO>Thanks

A:Domain Logon Too Slow

Does the DNS address in your IP configuration of your clients point to the AD controller.

Read other 1 answers

XP Delayed Logon to Domain

1. Windows 2003 SBS server IP192.168.0.35 (DNS service disabled)
2. I do not have a router. 1 way satellite equipment (upload is dialup) installed on XP machine. IP192.168.0.1 with ICS (Internet Connection Sharing).
3. Each XP client on domain has its Default gateway to and DNS points to that of ISP.
4. Gateway, SBS server & clients on a switch.

XP clients Issue: XP Delayed Logon to Domain. Around 2 minute delay (applying personal settings). Same issue as http://forums.techguy.org/networking...on-domain.html

Your assistance would be greatly appreciated, thank you.

A:XP Delayed Logon to Domain - DNS

1) Setup the DNS service on the server. (This can take a few hours to be created properly. Make sure your DNS is up and running with the correct setup before proceeding to steps 2-4)
2) Once the server DNS service is working right put the ISP DNS IP's into the forwarder of the DNS properties of the DNS service.
3) Change your Servers NIC's TCP/IP settings DNS entries to point to its own IP or loopback (
4) Change all clients DNS entries to point to the servers IP and take out all refferences to the ISP's DNS.

Remember that 2003 domains use Active Directory and this is VERY reliant upon DNS. If DNS is not working right your domain will crawl. ISP's DNS know nothing about your internal network and will NEVER resolve AD correctly.

If you need any more detailed instuctions just post back on the portion you need me to elaborate on.

Read other 1 answers

can anyone suggest a way to remove the domain name requirement in the OWA 2003 secure login page? I have tried going into the defailt virtual server and setting the default domain, but all options are unavailable (grayed out). I currently have to login as <domain name>\<username>.

any help would be appreciated.
Derrell Simpson

Read other answers

Hi all,
I have a problem with my one XP machine when logging onto a domain on a Windows 2000 Server. I recently reformatted and reinstalled the OS on this workstation and after doing so the logon is delayed by 1-2 minutes and hangs at the applying computer and applying personal settings dialog boxes. But after those 1-2 minutes (sometimes longer) Windows loads normally and the computer functions normally... almost.

Prior to reformatting though this XP machine logged onto the domain fine with no delay at all. It logs onto local accounts fast and other XP machines on the network logon without delay so I know it is something to do with this one PC.

Onced logged in the network is fine with this machine except for times when I would click on the server and I would get a box asking for user name and password to connect even though Im already logged on. And I also noticed on the start menu when expanded it changes from my full name as specified in the user account on the server to just my logon user name... why is that changing?

The Windows 2000 Server is using Active Directory. Also I can no longer browse for users or printers in the active directory from the work stations which is new.

I just got DSL and had some trouble with setting it up and turned off DHCP on the Server and had to change IP address and subnet of the Server. I am thinking this messed some things up. Any experitse in this area is greatly appreciated.

A:XP Delayed Logon To Domain


Problem was a DNS problem as suspected. Left the DNS server info intact on the client machines as obtained from the router. Edited the HOST file and added line with IP and server domain and everything is working perfectly. Fast logon's and can browse AD now. Network browsing is even faster now.

Read other 1 answers

Hi, am having this problem login on to a domain which isn't available anymore. I am currently running a Win 2003 server which i brought from another place which has a different domain name. I can't log on to the local domain. Is there anyway to change the domain to the local one that im using currently without needing to logon? Thanks

Read other answers

I am working on a laptop with XP Pro. It is not a member of a domain (though I think it once was). The PC is a member of the workgroup workgroup. Any attempt to logon when not in safe mode generates a " the doman <pc name> is unavailable".

In safemode, I can logon with no problem to any user account. I have changed the name of the PC and the name presented in the above error message will change to match the new PC name. The defaultdomain setting in the registry changes to match the given PC name.

I even created a new user account within safemode and trying to log onto that account when not in safemode generates the domain unavailble message.

From within safemode I have reset the password of all user accounts so they are known.

I have tries with the welcome screen and without it. When not using the welcome screen, the logon box does not have the third Logon To box where I could choose the local pc or the domain, probably because there is no domain to logon to.

ANY insight is greatly appreciated.


A:Logon problem - no domain

Read other 16 answers

Hi all.
i'm kinda new here, so bear with me

I have a problem, that i'm hoping someone can help me with.
i have a windows Vista x64 SP2 machine, which I use both at work and at home.
At work there is no problem, the laptop boots, logs in, and is active very fast (or at least fast enough ), but wwhen I get home, the logon process takes approx 2 mins.

My logic tells me, that since it more or less freezes at the "welcome" screen, the 2 mins is some sort of timeout, before it finds out that the DC cannot be found.
or maybe it is the time it takes to find out that the network drives I have mapped cannot be located. (I have tried turning of the Wifi before booting, but it didn't help)

I'm very use to only setting the machine to hibernate, which works fine, but once in a while I like to turn it off completely.

my question is simply put, this:

1) Is there some way I can set the timeout to a lower value so that It doesn't look for 2 full minutes?
2) can I tamper with the cached logins, and will this help?
3) can I create a logon script that simply checks if the DC can be contacted, and if not, then simply remove the mapped drives, so it doesn't try to remap them at logon?

I know the last question is not really placed in the right forum, but any help would be very appreciated.

A:Slow logon when not on domain

Does it still take longer to start at home if you are booting up, instead of coming out of hibernation? When you put your computer in hibernation, it saves all active states to a temporary file, then powers down without "shutting down". Part of the active state that it automatically resumes when coming out of hibernation, is the network connections as they were at the other location. Computers can sometimes be easily confused, and this may be the case for your laptop.

Two things about this situation that I generally recommend to people:

1) Shut down the computer instead of hibernate. Most people don't shutdown or reboot enough, especially with laptops. Reboots often fix many problems or temporary foibles that come up in Windows.

2) If you don't have a Windows password, create one. Then when you boot your computer, let the computer have a minute or so on the password screen while it loads stuff in the background and makes network connections, before you type in the password.

Every version of Windows I've worked on has benefited from their owners following these two guidelines. I can't speak to their necessity for Windows 7 yet, since I've only worked on one Windows 7 computer so far.

Read other 2 answers

Has there been any custom Windows 7 domain login screens or just the typical ones. My point is this: In windows XP-pro when logging on to a pc that has join the domain you see one screen with username/ password / domains. However in windows 7 one can switch users. this is confusing to inexperience, young and elderly computer users. Does anyone know of custom screens within Microsoft or third party?

A:Windows 7 domain logon

The below is a quote from Tech Support Forum. I think that this is what you are looking for.

If you have Pro or Ultimate, open the Group Policy Editor "gpedit.msc" and navigate to the following policy.
Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options.
In the right-hand pane double click the policy:

Interactive logon: Do not display last user name - Change to Enabled.

If you have the Home Premium version, you can set this policy using the registry.

*Make sure you back up the Key before making any changes.*

Open Regedit and navigate to the following location.


In the right side pane, look for the Value dontdisplaylastusername. Double click this value and change the Value Data to 1.

If this value is not present, right click and select New/DWORD (32-bit) Value.
Name the value dontdisplaylastusername and make the change noted above. Click to expand...

Read other 1 answers

I was changing the user name in my co-workers xp Pro. I also changed it to a workgroup computer from a domain computer. A box popped up asking for the original user name and password, which I put in. After I did this I rebooted. Now it will not let me logon using the new name and password, the old name and password, or any other combination. I also lost the "Log on to:" option at the logon screen.This computer has 5 user accounts in the domain logon and 3 user accounts in workgroup logn. I cannot access any domain accounts. How do I get the option back to "Log on to:" a domain? My co-worker is gonna kill me!

A:Can't logon to domain accounts

You'll have to have someone from your IT department with a Domain Admin account rejoin the PC to the domain.

They will have to login with a Local Admin account, then use their Domain credentials to rejoin the Domain.

Read other 4 answers

Just got a new Dell Optiplex GS270. All other new machines we have gotten was through a third party & already had XP Pro activated & all setup. This is the first one I've done. It is networked. The network connection appears fine. I can map drives, get to files, see and talk to the other Pc's on network but there is no domain option at signon. All the other Pc's require User ID, password, & domain name except this one. I assume it is a setting or something but don't know where to look. Thanks for your help in advance. The server is Windows 2000 Server if need to know.


A:Don't have domain option at logon


this is an easy 1 to answer as i deel with this all day

you need to logon to the pc and go the the system properties ie right clicking on my computer and select9ing properties.
then go to computer name section and click on network id

here you just follow the wizzard

glad i could help

any other questions just email me


Read other 2 answers

Major screwup!
I changed my laptop from the network Domain to a local Workgroup and now my Windows logon and password won't work.
Can anybody help me regain access to my laptop!

A:Domain/Workgroup logon

If you don't have a local account on the laptop, you'll have to reconnect it to the Domain and have a Domain Admin rejoin the laptop to the Domain.

Read other 1 answers

Due to a disk crash, I had to install a new 80GB Hitachi hard drive in my 400 MHz Pentium II with 384MB ram. I installed XP home and upgraded to XP Pro. The install seemed to go fine. I had two users defined in XP home (with no passwords set). I did the XP Pro upgrade and set the Administrator password. I also installed Norton Internet Security 2005. After shutting down and logging back on the two users I had setup in XP home were asking for passwords and if I just hit enter I got the following message:
The system cannot log you on due to the following error:
The specified domain either does not exist or could not be contacted.
Please try again or consult your system administrator.

Has anybody seen this problem before?
Appreciate your help.

A:Problem with the specified domain at logon


Are you still having this problem? If so, see if this helps.


Ah, this looks just like what you're seeing, after the upgrade:




Read other 1 answers

My users are kind of getting used to the new login screen. I have set the Default Domain Name in the regisytry and/or GPO. However, that default domain name seems to only work on the FIRST ATTEMPT. Should a user make a typo and login fails, the machine reverts over to Login to: localmachine name, which of course the user doesnt notice and login to network fails again resulting in calls.

Yes, I realize peopel need to be educated. But some can tbe educated Regardless of you opinions on end user understanding of the new process, is there a away to force it to always assume domain login?

A:Force only domain logon?

According to LockerGnome... but it seems to me that you would want to set the default domain name instead of the "="

You have to put a GPO ( logoff ) that exec this .reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]

Read other 3 answers

I wants to perform the specific application under domain admin right for domain user account
I have try create shortcut and type:"runas /user:ComputerName\Username /savecred "C:\path\to\file.exe""
Then, I can run it and pop up the Attention. but  the application is appear "APPSCRASH", when press"Yes" 
If I type local / domain administrator account, it can run application normally.
How to fix it? The application is typing of the dead

Read other answers

Currently we are in the middle of a migration project. We are migrating users from child domains to the root domain of one organization.
The user accounts are migrated with powershell using Move-ADObject cmdlet. This works as expected. The SIDHistory attribute is updated correctly.
Recently we received complaints from some *migrated* users - they lost their default/custom file associations. This happens only on Windows 8/Windows 8.1.
What happens:

the user is migrated and logs onher profile loads and everything's preserved (as expected)the user clicks on a .jpeg file (previously associated with program XYZ)OS asks the user to choose a program to open the file withthe user chooses a default program XYZ and the file openswhen the user clicks on a .jpeg file again - OS asks to choose a program again
i.e. the settings are not preserved.

Our investigation shows that it is connected with the UserChoice registry key and the HASH value under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.SomeExt

According to this blog 
the HASH is calculated based on user's SID. But after the migration the user has new SID and the HASH becomes invalid and we hit this:
"However In Win 8, the registry changes are verified by a hash (unique per user and app)  that detects tampering by apps. In the absence of a valid hash, we ignore the default in the registry."
Currently deleting the UserChoice key for all a... Read more

A:File associations are lost when user account is migrated from one domain to another domain (SID changes)

Hello Petar K. Georgiev,
Please check the following article to change the registry key to change back to the default file type associations.
Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Fangzhou CHENPlease remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Read other 2 answers

Hello everyone,

We are running into a somewhat peculiar issue that I have been unable to find any information about and I was hoping someone here could point me in the right direction.

Several of our Windows 7 laptops (We're working on moving to W10) have become unable to change the password for a domain account from the Change a Password screen after hitting CTRL ALT DEL. Usually when someone would select to change their password,
it would take them to the text boxes with the domain\username pre-populated, I'm sure you are familiar.

Recently, when following the same steps, an account selection screen comes up with the option to use a smart card or simply type in the username. While we are working on implementing smart cards, they are not yet in use and in fact should not even
show any options for them yet. After opting to type in a user account, rather than populating the username field with domain\username, the field remains blank with grey text saying "provider\user name" instead. If the user types in their domain\username
and attempts to change the password, they get a generic error stating it is unable to change the password.

Users are still able to use a co-workers machine to change their password from the same screen by substituting the username. Most of the affected machines are from users that work in the same team, even though those same users can change their passwords
elsewhere just fine. It appears to be isolated to specific ... Read more

Read other answers

I am trying to add a win 7 pro pc to a domain and I get this error " an attempt to resolve the DNS name of a domain controller in the domain being joined has failed"
I am running win server 2003 can anyone help?

A:error an attempt to resolve the DNS name of a domain controller in the domain being joined has failed

Ok I got it to work I put in the DNSserver address agine same as I did yesterday ( I must have put it in 3 or 4 times) and it din''t work I did it agine today and it worked the frist time. Thank you every one for your help

Read other 13 answers


I try Windows 7 with our environnement which is based on Windows 2003 SBS.

I have created a user on this server and i try to connect my test computer on this domain.

It recognizes the domain.

I have created the username on my PC with the short method (user in control pannel) and with ProfWiz. User is recognized too.

I restart the PC and i try to connect with the correct user. Username and password are correctly checked but i have already the message 'You have been logged with a temporary file'. Then a can't really organize the PC.

Someone can help me ??

Thanks and regards.

PS : I'm not englishspeaker then sorry for the message and fauts.

A:Windows 7, users and Domain

Quote: Originally Posted by EricF

'You have been logged with a temporary file'. Then a can't really organize the PC.

Hello and welcome.

Why not log on as a local user to configure the PC (rather than a domain user)?

If you want to log in as a domain user then you should first create that user on the domain controller.

Can you attach a screenshot of the user profiles? (computer > properties > advanced > user profiles > settings)

Read other 3 answers

Self explanatory.

What are the specific steps to take in order to map, say, 3 drives to all domain users when they logon. I have seen a few pages and they are all different, so if anyone has the exact script or steps (not a link) that'd be awesome. Going to sites and getting two or three different instructions is frustrating. It is a windows 7 environment on 2008R2.

Read other answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: Domain users

You would be better posting this in the networking forum for a better response!

Read other 2 answers

Hi. Sorry my language i am from Portugal, and is the first time i post in this f?rum!

I have a question!

I working with several computers in a domain! After restarting before installing the operating system again, I was wondering how do I set the same profile for all profiles!
In windows XP configured a profile with a user, and then put it in the default user folder!
In Windows 7 I have no idea!!!

Any ideia?

A:How to have same profile for all users in the domain!

Hi WildCatPT, welcome to the Seven Forums.

Windows 7 default user profile must be configured and customized in so called Audit Mode when no user profiles exist. In your case, deploying the same image to several computers, the procedure is as follows:Start Windows 7 installation on your reference computer
After installation boots to OOBE / Welcome mode after last reboot, enter Audit Mode
Customize the default user profile
Generalize the Windows image with Sysprep
Capture the image
Deploy the image (install to other computers using the captured image)

See this tutorial for instructions in customizing Windows default user profile in Audit Mode: User Profile - Customize During Installation.

Notice that as this tutorial is made to show how to customize default profile in just one computer as opposite to your need to do it for several computers, you need to change the /reboot switch in Sysprep command told in Step 3 to /shutdown switch in order to be able to capture the image before any user accounts have been created.

In your case, the Sysprep command told in Step 3 must look like this (changed part highlighted):

%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /unattend:E:\DefaultProfile.xml
More complete walkthrough tutorial for preparing a Windows image for deployment, including default user profile customization: Windows 7 Image - Customize in Audit Mode with Sysprep


Read other 1 answers

Windows Server 2003. I want one shared folder on the server to be visible to only one group of users. When I created the foler, it seems to have come with settings that make it visible to all users and all users have read&execute privileges. The security tab does not see to permit removing these users so I can resttrict access to a single group.

What am I missing?

Read other answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: domain users

BigC said:

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with ADClick to expand...

Hi BigC,

It sounds like you need to create a "Power Users" Group for them. All I know is that WinXP Pro has this category of user which is like a restricted Admin, but I don't know for certain if it is available for a windows 2003 domain with AD (perhaps).

-- Tom

Read other 3 answers


I have been using my Google-Fu to the best of my ability and have come up empty handed so far. Well, not empty handed, but not with the solutions I was looking for.
I have a domain machine that, through GPO, is set to use the default account picture user.bmp. This works fine after a user has logged in for the first time. However, before the first login all I get is an empty frame. Is there a way, short of editing authui.dll,
to get our bitmap to show up before the first login?

Read other answers

Hello everyone,
Laptops - Windows 7
DC - Windows Server 2012 R2
We have set up wireless network in the company.  When users log into Windows, it picks up the Corporate wireless network, and the users can enter the domain username and pwd, and it connects to the internal corporate network without any issue. 
What I want to do is that, when Windows boots up, and at the logon screen, users enter their domain credentials and log in using wireless network.  So the logon script runs, and they have their drives mapped, and etc...  it should be the same domain
logon procedure as the user would do when connected via wire, but we want to do wirelessly.  
I've read on internet, and tried regedit, and SSO, but none works...
any help will be very appreciated!
thank you in advance.

Read other answers

Hello. I have a small network with about 20 user accounts on it. I have windows 2000 server installed on my Domain Controller. I lost some user accounts , so I ran a restore from a couple weeks ago to get those Active Directory user accounts back in there. It seemed to work ok, but now when anyone tried to login to the server from their own PC, they get an error that states

"NO LOGON SERVER AVAILABLE TO SERVICE THE LOGON REQUEST" It will log you in, but with a defualt profile, and changes will not be saved. Any idea what this error means, and what would have caused it?

Like I said, I ran a restore from a few weeks ago, and everything was working just at that point in time. I'm in desperate need of some help. Thanks in advance for any info!!!

Another thing I should mention is that when I view security properties of any folder, it is very slow to show me what they are. Also, when I open up My Computer, it takes a long time to access it and show me the drives.

I have viewed the resources, and my CPU is hovering around 2-5% usaeg, and me memory is only about a third used or less. So it isn't a performance error.

A:Domain Controller logon failure

When you added the server to the domain did you do so via 'server manager' on the PDC, THEN join the server to the domain? If not, try doing so. This may help.

Read other 1 answers

Hi All,

First time poster, long time reader.

I was wondering if anyone could help me out here.

I am an IT manager at a school (800 users in total). I have only recently taken over, and we have migrated to Windows 7 (also upgraded the domain to Windows 2008 R2). The school employs a rather expensive IT consultant (friend of the Bursar), who is constantly on my case, as i literally ripped his solution apart (RM if anyone knows that name?) as I convinced the school to move to a more standard / corporate solution for the IT.

This consultant is stating that the performance (logon times) are slow, and i wanted some feedback on the people on here.

In a nutshell,

- Windows 7 desktops (32 bit, Professional)
- Windows 2008 R2 domain.
- GPO used obviously for locking down the OS - though a low number of GPO's
- GPP used for mapping of drives (students get 2 drives, staff up to 6 depending on role)
- GPP used for mapping printers (30 printers onsite, but never more than 3 printers mapped per user session)

On average it takes approx 25 seconds from log on to the desktop.

I've always though that if the log on time was below 30 seconds in the above environment then that was acceptable? Not blistering, but certainly not "slow"?

Any feedback would be appreciated.



A:Acceptable Domain Logon Times

Assuming the rest of the logon time is similar, 30 seconds is pretty good. I generally don't focus specifically on one section unless it stands out as significantly slower than the rest of the boot process, either. As a quick aside, I would say that on reasonably middle-of-the-road hardware in today's sense, anything quicker than 2 and a half minutes from POST to logged in is quick, and anything in addition to that needs to be considered in the context of the environment (are you doing a lot of GPP, whcih slows down logon? Running logon scripts? Lots of services to start, especially antivirus, app virtualization, etc? Do you have a baseline to compare this to?).

As someone who deals with a lot of what you're questioning now as a day-to-day job, I would say one of the most important things to do when you're considering boot performance on client machines is to have a reasonable representation of the hardware in the environment (as many of the models you would expect a user to have at their desk as possible), and the image you expect to push out to those machines, as your launching point for starting to clear the fog on your own environment's performance numbers. Using xbootmgr to take boot traces, you start by seeing what you have pushed to the client machines and how it is performing on the hardware you have in it's current form (taking 5 - 10 traces to normalize times is a good idea). Then, you look at ways to shore up those times, looking at things like what can you delay... Read more

Read other 1 answers

When users are locked out of the domain Windows 2000 allows logging on to windows. (i.e. users are locked out due to incorrect passwords, password expired etc.) It does not tell them that their accounts are locked. Users believe they are on the domain but are really not. How can I prevent users from logging on to Windows when their domain accounts are locked out.

A:{Advice Offered} - Domain Logon


This is actually a bug with Win2K workstations logging onto a domain.

The user's account is locked out, but they log onto their workstation with cached information.

Read "User Is Not Alerted When Logging On with Cached Credentials" Technet article for the details on how to edit the registry to bring up a window to inform the user that they are logging on with cached credentials.

Hope this helps

Reuel Miller
Windows NT Moderator (yes, that does make me biased )

[email protected]

Website: www.xperts.co.za/multiboot

Every morning is the dawn of a new error...

Read other 1 answers

What are the reg edits that allow a win98 machine to auto logon to a NT domain, and where do I input the values?

Read other answers

I have removed a computer from a domain, then the computer restarted automatically.
Now I cannot log back in, I don't know any user x password combinations that work. Original user of the computer was someone who left the company earlier. How should I get back access to the computer? It's a Lenovo Thinkpad E550 with Windows 7 professional.
Thank you

Read other answers

I have a Windows 7 PC that is part of a domain, when the user goes to login, they hit CTRL-ALT+DELETE, then choose the profile to login to (Last known user / other user). In Windows XP, the login window would come up with the last know user name without hitting C+A+D.. I am not worried about the C+A+D, I do however want to get rid of showing the other user, have the login displaying the user name and password field after C+A+D. So not having to click on the profile first, then typing in the user password.

Make sense?


A:Initial logon Windows 7 - AD domain

Take a look here

Enable or disable secure logon (CTRL+ALT+DELETE)

You could also do this in Group Policies

Read other 1 answers

I changed my computer from a domain to a workgroup. It warned me that I had to have administrator proveleges and logon password. before proceeding I verified that and when i made the change it inquired for username and password and accepted it. It welcomed me to the workgroup and said the computer had to be restarted. I restarted and now can not logon!!

A:Cant logon after change Domain to Workgroup

You'll probably have to ask your IT department to rejoin the computer to the domain. And they should know the proper way to change from domain to workgroup.

Read other 3 answers

Just figured out how to "Logon using Dial-up networking" in 7 enterprise. My VPN connection establishes but immidiately disconnects because something in the process is locking my domain user account. Ideas?

Thanks, Jeff

A:Logon with DUN locks domain account

The easiest way to fix this is to speak to the IT people who are managing your Server and Active Directory.

Read other 1 answers

I changed my domain from an old work one to a personal one. This I thought would make it meaningful to my newly established wireless network.um!Grhh. First i noticed my old work laptop would not network with my old pc desktop since the laptop was still in a work domain (properties had all the detail) Anyway I changed the domain to workgroup as it said on another site for a guy who also got a hand me down from his old work When i logged in to my laptop I got asked username and password, I used what i had before, error, wrong something about not correct for domain or not having access This means I can't even use XP functions. There must be some way of re-setting or establishing a new domain from scratch. I do not have the option of going back to my old work place. Its miles away Thanks in hope that someone knows how to get around this

A:unable to logon after domain change


Before you log in does your domain name show under the Password?


Read other 4 answers

I was loaned a laptop from my school (Samsung R580) as I needed to use software that had been downloaded onto it. However I am not even able to logon to the laptop at home as it is still connected, or wanting me to logon to the school domain, which I am not connected to. Therefore I was wondering whether I would be able to logon to a new domain or something similar to get onto the laptop and access the software?

Read other answers

I have had this answered in the past, but cannot locate the thread so I am asking again.  I want to restrict a Windows 7 Pro machine so that only I and a couple other domain users can log on.God Bless, Mark A. Sam The Bible promises there will be NO computers in Heaven: Revelation 21:4

A:Restricting Domain user logon

I want to restrict a Windows 7 Pro machine so that only I and a couple other domain users
can log on.
Sure, you can set it locally.
On your WIndows 7 Pro, run gpedit.msc
Configure local policy as described in step 7.
Configure Computer / Windows Settings / Security Settings / Local Policies / User Rights Assignment / Allow Log on Locally. Configure this setting so that only users who should log on locally are listed.

Read other 5 answers