Over 1 million tech questions and answers.

Domain users group - no domain?

Q: Domain users group - no domain?


I'm using Windows 7 Home Premium x64, IE9, with Comodo Firewall and HIPs, Avast AV, MBAM, EMET and SAS.

I have one LUA and one Admin a/c, both strong passworded---Guest a/c is disabled, Real Administrator is enabled, passworded, and never used. I'm behind a router with no network or file & printer sharing and have all recommended blocks on my firewall.

I've just replaced my admin and lua accounts after finding a lot of null sid logon fails at all my accounts over a few months. It might have been a self-snafu, but I seem to have cured the issue. All except Type 3 Anon Logons at every boot, but i read somewhere that too can be a snafu. I'll keep an eye on them.

Meanwhile, eventlog showed my old accounts being removed from a 'no name' global group that had the Domain users group sid S-1-5-21-*-*-*-513. The new accounts were both added to this 'no name' global group. I'm a workgroup pc, not domain.

Home premium doesn't have secpol and I can't get NET command to enlighten me on this domain group. Should I have any global/ domain groups?

Finally, Is there a way to enforce 'Do not allow enumeration of SAM accounts and shares from the Local policy' or disable 'Network access: Allow anonymous SID/Name translation' or equivalent on Win 7 Home Premium?

Preferred Solution: Domain users group - no domain?

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Domain users group - no domain?

Good grief, I am afraid after just reading all of this. I recommend keeping only your windows built-in firewall, but its up to you.

Do you go to some heavy virus-infected websites a lot? All you really need for a home computer is something like MSE. MBAM is great to use with it as well. If you have more than one antivirus, chances are they will begin to conflict with eachother. update and scan for viruses, and if there aren't any, relax. DO you do things on your computer that require top notch security?

If you are looking for better, you might start looking into paying for a AV. google best antivirus to find reviews on different ones.

Windows itself has ways of locking down your computer, such as bit-locker.

Read other 9 answers

I have an application that requires my users to add a registry entry each time they enter the program. The easiest way I figured to do that was to give all my users administrative privileges on each Win2000 machine. The problem is they log on to a domain, and I'm having to enter like 50 user IDs individually on each Win2000 machine. I have us in a group in the WinNT domain, but I can't find anywhere on the Win2000 PC to add a group from the domain. It's just time consuming and thought I'd see if anyone knew of an easier way.
This was hard to explain...hope it's half-way clear.

A:Adding Domain Users As A Group

Read other 6 answers

DC: Win Server 2003
Laptops: Win7 Pro

When joining a set of laptops to the domain it prompts for domain admin credentials and appears to be successful, but gives an error of 'Changing the Primary Domain DNS name of this computer to " " failed. The name will remain domain.local
The error was:

The RPC Server is unavailable.

When attempting to add Domain Users to the local administrators group:
Windows cannot process the object with the name "domain users" because of the following error:
The RPC server is unavailable.
This happens even when wired on the network. I have tried uncommenting the localhost line in HOSTS, and manually adding the DNS server (which is also the DC).

Any suggestions would be very helpful.

A:RPC error adding domain users to local admin group

Have you checked the RPC service on the server? Manually stop and restart it as well.

Read other 4 answers

I would like to give software Installation restriction for Domain Admin users but he can have all of remain admin rights.
If he want to install any software it should be ask for password.please suggest to me is there any Group Policy for that one.
Server : windows 2012 R2
Clients : windows 10 

Read other answers

I have PCs sitting in a shared area and I would like to prevent users from different domain to logon to my computers. How do I do that with GPO? I searched internet and they suggested "Deny logon locally" I don't think that applies to
my case. Said, my users from DomainOne, I don't want users from DomainTwo, DomainThree, etc to logon and use my department computers.

Thang Mo

Read other answers

how do I add these permissions to my account? I'm trying to change "How a Service is Started" and it won't let me without one of these persmissions. thx

A:Account Operators group, the Domain Admins group, the Enterprise Admin

Quote: Originally Posted by bellaneph

how do I add these permissions to my account? I'm trying to change "How a Service is Started" and it won't let me without one of these persmissions. thx

Is your account a standard user, or a member of the admin group? You can check cpanel>users>your user. Does it say admin?

Read other 2 answers

I need to add a domain group containing a large amount of users to a local group on several machines. I can create the group locally, but I would have to manually enter each user account. I just want to add the existing domain group.

It is an NT network and the clients are XP Pro.

A:Adding a domain group into a local group

Nevermind, I figured it out.

Read other 1 answers

I was wondering if there was any way to setup a group using Windows 2000 Avdvanced Server to contain information about how the computer should be setup if this computer and or user logs into the domain. Example: create a group of users where when this users logs into the domain have certain mapped network drives, and have certain network printers available. If you can't do this through creating groups in the Active Directory, then is there any other way that you know of? Thanks in advance.

A:Domain Group Control

We use a log in script for the mapping of the drives. So, for example, when a user in Tampa authenticates in AD, it knows the user's primary group is Tampa, therefore maps the users drive to the Tampa server. Same thing for Reno. And when the Tampa person goes to Reno, because the primary group is Tampa, they still map to Tampa... In AD, on a user's Profile tab, in the user profile box, in the Login Script line, we just type the name of the script (login.exe). the login.exe is a basic script similar to (remember I am not a scripter!):
if primary group = Tampa, then U:\ = \\tampafileserver\share
if primary group = Reno, then U:\ = \\renofileserver\share
Hope that helps!

Read other 1 answers

I bought a secondhand hp compaq nx9030 Laptop. I change from domain to work group then I must restart my laptop now I can not log in. ( Logon message) the system could not log you on. Make sure your User name and domain are correct, then type your password again. Letters in password must be typed using the correct case. Please help.

A:change from domain to work group

Before you left the domain you should have changed the local Built in Administrators password. Maybe you're lucky and there is no password
At the login screen for the user type Administrator. and leave the password blank. The Domain should be listed as (this computer)
If that fails, due to forum rules we cannot help you with passwords, you will need to go back to where you bought the laptop and ask for the Local Built In Administrators Password. Once logged in, you can change the Administrators password, and create your own user account with admin privileges.

Read other 1 answers

i need to shutdown a number of computers ... they are all on the same domain ... i could use ShutDown.exe but it goes by computer name ... I need one that just goes out and shuts down computers either by domain or IP .... Any Help!

A:Shutdown a group or domain of computers


Will allow you to shutdown multiple computers through an ip range.

Read other 1 answers

I try to add a domain User to local administrator group
We are a intertanional Company (Austria French Sweeden)
The commandline is: net localgroup s-1-5-32-544 domain\user /add
i recive the error
System Error 1376 has occurred
The specified local group does not exist
Please helpe

A:Add Domain User to Local Group with SID

"Net localgroup" allows adding a domain local group from a trusted domain. The membership is there but will never work as the SID will not appear in the access token
of a user or computer connecting to the machine. the security identifier (SID) of the domain controller is not identified in the operation. For more reference, please see:
Domain local group from foreign domain can be added using "net localgroup" and GC search
Best Regards

Read other 7 answers

I just realized that on October 3, 2003 that my Group Name and
Domain was changed. My logs do not indicate what happened,
nor do I recall downloading or changing anything at that time.

I'm having problems. recently I found my Guest Account Profile
was missing and I could not open another user account either.
I fixed that yesterday with the help of dai but I still am plaqued
with other minor irratations, such as:
Can not login into Hotmail
Can not view several forums.
Can not Restore to a Prior Date.
Can not access Firewall or Virus Scan logs.
My toolbars frequently disappear and need to be reset.
Actually, the list goes on. But those are the most irratating.

I'm on my way to buy a truckload of CD's to backup my files.
I'm considering a complete reinstall. But I would like to know
what may have caused these problems. Security precautions
were taken prior to ever going online. I have never seen a virus,
and a HijackThis Log appears fairly clean.


A:Who or What changed Group Nmae & Domain?

No suggestions?

I backed up all of my persoanl files and programs.

But it would be helpful to learn what caused this and
if there is a way to fix it without a complete reinstall?


Read other 3 answers

Hey guys, i just recently made a OU on our Domain Controller and added about 10 computers to it (computers, not users) and had a Startup script applyed to that OU through Group Policy, now this start up script works for all machines but one, which is our problem machine.. it won't apply the GPO. i did a gpupdate /force on it, restarted and still no-go.

If anyone can at least give me an idea of what the hells going on i'd greatly appreteate it.

A:Domain Group Policy Problem.

Read other 6 answers

Is anyone here using Win7 Pro in a 2003 Functionality level Active Directory environment?

On multiple Windows 7 boxes, my laptop, and my desktop I ALWAYS get the error attached in the screenshot "Failed to connect to a windows service" when I log onto the Domain. I have looked at the event log and it is very, very vague. Most our IT users who have 7 just don't log onto the Domain at all, but i'd like to figure out what the issue is.

The Aero service also does not work when I log on, so i have the win2k look, and then after about 2 minutes the service starts again, by itself and all is well.

Any ideas??

A:Troubles with AD Domain / Group Policy?

Not exactly a "crashes and debugging" issue, but perhaps sufficiently interesting for this section of the forum

Can you please post the text of the event(s) which relate to this error using the "copy" button (to copy details to the clipboard) in the lower left-hand corner of the event details dialog.

Read other 6 answers

I downloaded that 120 day eval copy of Windows 2003 a long time ago, but never used it. I've been wanting to check out the server-side of Active Directory, permissions, and whatnot, and plan to install it on Virtual PC later, and play with it.

My question is: Here at work they've got a few DCs, and computers with XP Pro. Permissions on the client computers are restricted based on Group Policy. I'd like to mess with the same stuff at home.

Basically, the question boils down to: I'd like to experiment with restricting groups and/or individual users with GPO, however, from what I can see, in the GP editor, it seems that there is only one Group Policy, which govens the entire computer, and all users regardless of their group.

I'd like to apply different restrictions, sort of like assigning one Group Policy to one user, and another Group Policy to an entire group, etc.

Any of you know where I can find information on this? I've definitely tried Google, and a few other search engines, but the sites that it turned up weren't really helpful at all.

Thanks in advance,


Read other answers

we have a local pc that was once connected directly to server and was set up as a domain user login

The user has to login to a domain even though it is no longer connected directly. This is not a problem until needing to change the windows login password.

The control panel forces us to press Ctrl Alt Del to change password then does not allow us to change the password as it still thinks it is connected to the domain

Please can anyone advise on how to change the domain login user to user-zoo login?

A:How do I remove a local computer from domain group

To remove a a computer from the domain you need to first log in as a local administrator. This will be the account that was first setup when the operating system was installed. Once logged in you need to go to:

start> Right click on 'Computer'>Properties

You should be presented with a windows similar to the one below:

After this you need to click on change settings:

From here you need to click on change:

Here you want to select Workgroup and in the box enter 'WORKGROUP'. Press Ok and you may be presented with an box asking for a username and password to take it out of the domain. To do this you need to enter the local PC name and the username and password. For example if the machine was name Josh-PC and I was logged in as Administrator, I would put the following:

Username: Josh-PC\Administrator

Password: [Pa55word]

Hope this helps,

Read other 1 answers


Not sure if this is the right place for this sort of question, but here goes.

My organisation includes approx 100 computers. A mix of 2000, XP, Vista and 7.

I installed WSUS on one of the servers, and all of the 2000/XP/7 systems reported in gracefully. However, there were 0 windows Vista systems in the WSUS console. Diagnosing this problem I went to a couple systems with Vista, and ran gpupdate /force on them. This is what I got back

Updating Policy... User Policy update has completed successfully. Computer Policy Update Failed. To diagnose the failure, review the event log or invoke gpmc.msc to access information about Group Policy results.
Checked the event log. Here's what's in it:

The processing of Group Policy failed. Windows attempted to read the file \\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
I have verified that the UNC path "\\<FQDN>\sysvol\<FQDN>\Policies\{31B2F340-016D-11D2-945F-00C04FB9... Read more

A:Vista not getting Group Policy in Domain environment


Check the Vista PC's Windows features to see if the service is active.

Read other 1 answers

Hi all..

We have unfortunately just ended up with our first Vista machine here at work and 30 mins into my setup Ive already run into a question..

Dell, Vista Business, joined into our domain

Having googled around a bunch, I understand that the local admin account is disabled upon install.

I found a tip that recommended running cmd as admin and
net user administrator password
net user administrator activate:yes

I performed this, got command successful returned from both.. but when I try to login as <compname>\Administrator @ the login, or try to use the same to perform any tasks on the system I get denied and am told bad user or pw.

I ran user setup as domain admin and confirmed that my local user account is part of the administrator group... found that the local Administrator account was still set as disabled, so I cleared the disabled checkbox.. Im too paranoid to use "Set password" however in case my prior password did somehow work (it doesnt appear to have) and by then Setting Password I'd be screwing my admin account of its encrypted files (do I even have any if the accounts never been logged into?)

Yknow what started all this? Trying to delete Adobe Speed Launcher and Dell Network Manager from the Startup in the start menu.. 'cause god forbid I do that without being a bloody domain admin.

Suggestions as to why my local user account (lets call it bob) can't do any admin functions though Im part of Adminstrators group locally? What ... Read more

A:Local admin group accounts in a domain etc.

Why fight the system? Use an account other than the "Administrator" account. It would appear Vista just isn't designed for that to be a user account.

Read other 2 answers

When I try to add a domain user to the local administrators group, I receive an error saying that the user is already a member of the administrators group. The thing is, that user is not in the member list of the administrators group. Why do I receive that message.

I did a copy of the problematic user in the Active Directory and I am able to add that "testuser" to the local administrators group without any problem.

From my point of view, the problem is not related to user's permissions because I did an exact copy of that user and I can add that "testuser" in the group.

Any solution?


Read other answers

 I joined my Windows 7 computer to my 2003 domain. The group Domain Admins was added to local Administrators group as it should but I still do not seem to have full access rights to the computer when logging on with an account that is a member of the Domain Admins group. For example I cannot access the c:\documents and settings folder. I also cannot install software remotely, ie.. virus software deployment.  I recieve an error staing that I must use an account that is part of the administrators group. Any idea why domain admin rights are not being honored.

A:Domain admin group denied access

Windows 7 works the same way as Windows Vista. Administrator accounts do not normally run with administrator privileges until you elevate whatever process needs administrator privileges. C:\Documents and Settings is a junction not a folder. It is for comaptibility purposes and can't be accessed by normal methods. There is no need to access it as it is just a pointer to the real location of the files C:\Users.I suggest you do some reading on the differences between Vista and XP. For the most part everything you read about Vista is applicable to Windows 7.http://technet.microsoft.com/en-us/library/cc709691.aspxhttp://download.microsoft.com/download/5/7/8/578cbb95-c42e-4b9f-9989-93ffdeae8af4/Introducing_Windows_Vista.pdfhttp://technet.microsoft.com/en-us/windows/aa904820.aspxThe above links will get you started. I recommend you install Vista on your own computer and learn it inside out. It has many advantages over older versions of Windows, especially in a domain environment. It is however very different from XP. It bears repeating that whatever you learn about Vista will apply to Windows 7.

Kerry Brown MS-MVP - Windows Desktop Experience

Read other 4 answers

Hi Guys,

Can please help with this issue?We had two windows 7 machines have this issue:
Domain IDs in local groups show SID not the actual name.
Please see the screenshot.
The rest windows 7 machines all ok.
These two PCs connected to our domain and have network connection.They are using the same image as other PCs.

Thank you.

A:Domain IDs in local group show SID not the actual name

Welcome to TSG!

Is the SID the correct one for the Domain? Windows only displays the SID if it can't find it in the User Database, as it has no friendly name to Display in that case.
Could just be a corrupted entry for whatever reason.

Remove those two groups/accounts and re-add them.

The first (ending in -512) is the Domain Admins group
The last one (ending in -98061) is not a well known RID, but if other systems are showing the names, should be easy enough to re-add the correct group/account

Read other 3 answers

i have a problem with a win98 pc connecting to a win2000 server network.

i want to network a printer attached to the win98 pc so all other network pcs can use it.

problem is when i go into access control and change the user-level access control to the appropriate name server (has to be done before i can change the name of the printer and set permisions), it resets on logon to the original server.

i cant find the setting to change it for all groups on the windows2000 server, seems like the obvious places are all correct.

any help would be great thanks

A:Changing Group Domain On Win2000 Server

ah man! I remember that problem! I can't remember what you do!

for what its worth, win9x networking tends to fix itself when you remove all of the important components (client for microsoft networks, TCP/IP, etc) and then add them back in again.

Read other 4 answers

Running Server 2003 with AD. Lately I've been seeing errors in XP clients EVENT VIEWER. Errors are as follows:

Event ID: 1202 Source: SceCli
Security policies were propagated with warning. 0x4b8 : An extended error has occurred.
For best results in resolving this event, log on with a non-administrative account and search http://support.microsoft.com for "Troubleshooting Event 1202's".

Event ID: 1085 Source: Userenv
The Group Policy client-side extension Security failed to execute. Please look for any errors reported earlier by that extension.

I've tried all the MS solutions and have even gone as far as re-loading the default "compatibility" GP template on the server (making all options "Undefined"), then refreshing the policy on the clients with no success. The errors do not seem to be affecting usability at all on the network. Anyone else?

A:Group Policy errors on XP clients in Domain

What is your AD Config like, do you have trusts, have you tried to delete the user account and then recreate it. I found a MSKB article that describes your issue to the tee from what you described, here http://support.microsoft.com/default.aspx?scid=kb;en-us;324383

Hope this helps

Read other 3 answers


I work in a school with a CC3 (RM) network basically modified windows xp and 2000, i have joined a standard windows xp machine to the domain and added a user on the domain local admins group, however when this user logs in they can see the c drive and access other usually restricted parts of windows what they can not do is change the screen resolutions or right click on the task bar.

what would cause this to happen? my understanding is that once the user is in the local admin group they should have full access to everything on that laptop and rm will not supplt support because they do not support standard windows.

there is no way to block this kind of use from active directory is there ??

A:domain user, in local admin group being restricted why ?

Read other 13 answers

I don't know why but some of the machines don't apply the group policy from my Windows 2000 Server Domain Controller. I have Windows XP Pro SP2 Clients joined to the domain that run the policy just fine and a certain number that all just don't apply either my policy or the default domain policy.

At first I thought it could be the user was in the deny list because of group association, but then I logged into a computer that I knew applied the policy and everything worked just fine. I tried logging in as one of the users I knew worked on a machine that didn't apply the policy and the policy was not applied.

To make things clear the problem must be with the computer configuration itself and not a problem with the user account.

I have spent some time googling my problem and some things said to make exceptions for certain ports in my firewall, but that didn't help any either (I turned the firewall off completely and still nothing).

If you have any suggestions as to things to look at that may help that would be greatly appreciated.

A:Some XP Clients don't accept group policy from Domain Controller

I couldn't get any PC's to "take notice" of the group policy on the Server! I tried searching the web and went through instructions websites given...still no luck months on!

Read other 1 answers


I think the best place for this question is in Networking, so forgive me if it's not.

I have a Vista Business laptop with a wireless connection to a small network of about 5 machines. I having a problem opening a "Select Users or Groups" dialog box during a MS wizard (ConnWiz30.exe). When I am supposed to open that dialog box I get the error mesasage...

"The program cannot open the required dialog box because no locations can be found. Close this message, and try again."

If I try the same thing, using the same wizard, on a wired computer on the network I get no problems. If I try to get to the same dialog box by using share permissions on the laptop I can do that, it's just the wizard that doesn't work.

The only major difference I can tell between the wireless and wired connections is that the wireless/laptop LAN connection has a SSID, the wired computers do not. Although when I tried connecting the laptop via a wired connection I got the same problem.

This network is not run off a domain.

Any help with this is really appreciated, I'm pulling my hair out over this.


A:Wireless/Wired Domain/User & Group Issues.

Take a look at: Windows XP And Vista On The LAN Together.

See if this site: File and Printer Sharing in Windows Vista helps you if the previous one isn't doing the trick.

Read other 1 answers

I try the following command to add a domain user into local Administrators group of my Windows 7 computer and my computer has already joined domain.
net localgroup administrators mydomain.local\user1 /add /domain
It returns successful added, but I don't find it in the local Administrators group.
How can I do it?

A:Add domain user to local group by command line

Because you are using the /domain parameter you are executing the command on the PDC instead of on the local computer. Try this command:
net localgroup administrators mydomain.local\user1 /add

More information: http://technet.microsoft.com/en-us/library/cc725622(v=ws.10).aspx

Read other 6 answers


I'm not sure where to post this as it's not really a network issue due to the computers not being domained.

At the moment I am applying local group policy settings for each computer (many computers) manually on each machine (Taking about 20 minutes per machine due to the MANY settings that need checking).

Is there any way I can cut this time down by saving a set of policy options from one computer and applying that set to multiple other computers (via a usb stick etc?)

Thanks in advance,


A:Automating Local Group Policy on non-domain machines?

Hi and welcome to TSF not quite sure but you may find something here Group Policy management for IT pros

Read other 13 answers

I wants to perform the specific application under domain admin right for domain user account
I have try create shortcut and type:"runas /user:ComputerName\Username /savecred "C:\path\to\file.exe""
Then, I can run it and pop up the Attention. but  the application is appear "APPSCRASH", when press"Yes" 
If I type local / domain administrator account, it can run application normally.
How to fix it? The application is typing of the dead

Read other answers

Hello everyone,

We are running into a somewhat peculiar issue that I have been unable to find any information about and I was hoping someone here could point me in the right direction.

Several of our Windows 7 laptops (We're working on moving to W10) have become unable to change the password for a domain account from the Change a Password screen after hitting CTRL ALT DEL. Usually when someone would select to change their password,
it would take them to the text boxes with the domain\username pre-populated, I'm sure you are familiar.

Recently, when following the same steps, an account selection screen comes up with the option to use a smart card or simply type in the username. While we are working on implementing smart cards, they are not yet in use and in fact should not even
show any options for them yet. After opting to type in a user account, rather than populating the username field with domain\username, the field remains blank with grey text saying "provider\user name" instead. If the user types in their domain\username
and attempts to change the password, they get a generic error stating it is unable to change the password.

Users are still able to use a co-workers machine to change their password from the same screen by substituting the username. Most of the affected machines are from users that work in the same team, even though those same users can change their passwords
elsewhere just fine. It appears to be isolated to specific ... Read more

Read other answers

I am trying to add a win 7 pro pc to a domain and I get this error " an attempt to resolve the DNS name of a domain controller in the domain being joined has failed"
I am running win server 2003 can anyone help?

A:error an attempt to resolve the DNS name of a domain controller in the domain being joined has failed

Ok I got it to work I put in the DNSserver address agine same as I did yesterday ( I must have put it in 3 or 4 times) and it din''t work I did it agine today and it worked the frist time. Thank you every one for your help

Read other 13 answers

Currently we are in the middle of a migration project. We are migrating users from child domains to the root domain of one organization.
The user accounts are migrated with powershell using Move-ADObject cmdlet. This works as expected. The SIDHistory attribute is updated correctly.
Recently we received complaints from some *migrated* users - they lost their default/custom file associations. This happens only on Windows 8/Windows 8.1.
What happens:

the user is migrated and logs onher profile loads and everything's preserved (as expected)the user clicks on a .jpeg file (previously associated with program XYZ)OS asks the user to choose a program to open the file withthe user chooses a default program XYZ and the file openswhen the user clicks on a .jpeg file again - OS asks to choose a program again
i.e. the settings are not preserved.

Our investigation shows that it is connected with the UserChoice registry key and the HASH value under HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.SomeExt

According to this blog 
the HASH is calculated based on user's SID. But after the migration the user has new SID and the HASH becomes invalid and we hit this:
"However In Win 8, the registry changes are verified by a hash (unique per user and app)  that detects tampering by apps. In the absence of a valid hash, we ignore the default in the registry."
Currently deleting the UserChoice key for all a... Read more

A:File associations are lost when user account is migrated from one domain to another domain (SID changes)

Hello Petar K. Georgiev,
Please check the following article to change the registry key to change back to the default file type associations.
Please note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Best regards,
Fangzhou CHENPlease remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Read other 2 answers

Hi. Sorry my language i am from Portugal, and is the first time i post in this f?rum!

I have a question!

I working with several computers in a domain! After restarting before installing the operating system again, I was wondering how do I set the same profile for all profiles!
In windows XP configured a profile with a user, and then put it in the default user folder!
In Windows 7 I have no idea!!!

Any ideia?

A:How to have same profile for all users in the domain!

Hi WildCatPT, welcome to the Seven Forums.

Windows 7 default user profile must be configured and customized in so called Audit Mode when no user profiles exist. In your case, deploying the same image to several computers, the procedure is as follows:Start Windows 7 installation on your reference computer
After installation boots to OOBE / Welcome mode after last reboot, enter Audit Mode
Customize the default user profile
Generalize the Windows image with Sysprep
Capture the image
Deploy the image (install to other computers using the captured image)

See this tutorial for instructions in customizing Windows default user profile in Audit Mode: User Profile - Customize During Installation.

Notice that as this tutorial is made to show how to customize default profile in just one computer as opposite to your need to do it for several computers, you need to change the /reboot switch in Sysprep command told in Step 3 to /shutdown switch in order to be able to capture the image before any user accounts have been created.

In your case, the Sysprep command told in Step 3 must look like this (changed part highlighted):

%windir%\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /unattend:E:\DefaultProfile.xml
More complete walkthrough tutorial for preparing a Windows image for deployment, including default user profile customization: Windows 7 Image - Customize in Audit Mode with Sysprep


Read other 1 answers


I try Windows 7 with our environnement which is based on Windows 2003 SBS.

I have created a user on this server and i try to connect my test computer on this domain.

It recognizes the domain.

I have created the username on my PC with the short method (user in control pannel) and with ProfWiz. User is recognized too.

I restart the PC and i try to connect with the correct user. Username and password are correctly checked but i have already the message 'You have been logged with a temporary file'. Then a can't really organize the PC.

Someone can help me ??

Thanks and regards.

PS : I'm not englishspeaker then sorry for the message and fauts.

A:Windows 7, users and Domain

Quote: Originally Posted by EricF

'You have been logged with a temporary file'. Then a can't really organize the PC.

Hello and welcome.

Why not log on as a local user to configure the PC (rather than a domain user)?

If you want to log in as a domain user then you should first create that user on the domain controller.

Can you attach a screenshot of the user profiles? (computer > properties > advanced > user profiles > settings)

Read other 3 answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: Domain users

You would be better posting this in the networking forum for a better response!

Read other 2 answers

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with AD

A:Solved: domain users

BigC said:

i am looking at changing what rights users require on my companys domain, as all the IT staff have domain admin rights, which most of then dont need, is there a way making new groups and giving the certain rights like being able to install software and printer ect.

we are running a windows 2003 domain with ADClick to expand...

Hi BigC,

It sounds like you need to create a "Power Users" Group for them. All I know is that WinXP Pro has this category of user which is like a restricted Admin, but I don't know for certain if it is available for a windows 2003 domain with AD (perhaps).

-- Tom

Read other 3 answers

Self explanatory.

What are the specific steps to take in order to map, say, 3 drives to all domain users when they logon. I have seen a few pages and they are all different, so if anyone has the exact script or steps (not a link) that'd be awesome. Going to sites and getting two or three different instructions is frustrating. It is a windows 7 environment on 2008R2.

Read other answers

Windows Server 2003. I want one shared folder on the server to be visible to only one group of users. When I created the foler, it seems to have come with settings that make it visible to all users and all users have read&execute privileges. The security tab does not see to permit removing these users so I can resttrict access to a single group.

What am I missing?

Read other answers


i have changed the domain of the computer (from say old.net to new.net).
there is a folder shared on another machine on old.net domain. the user X was able to access it. aftter changing his domain from old.net to new.net he no longer can access that shared folder.
User X has working credentials for both domains.

on accessing it it asks for credentials. upon entering his correct user name in the format (old.net\X) he is not able to access it.

i had exactly same setup with another user Y and he was able to access data .

is there anything that i am missing ?

also accessing that folder first time asked for credentials but now it doesnt asks .. why ? there is nothign in credentials manager.


A:cannot access shared folder after changing domain with old domain cred


Have you removed/re-added the User's credentials (from the PC with shared folder) with the new domain name?
Also, make sure that the shared folder has Everyone permission in the Security Tab.

Read other 1 answers

Here is the scoop ... Two networks connected via frame relay line. Two different PDCs and domain names. Can ping internal IP address, but can not browse through Network Neighborhood. Set up WINS on both and when trying to get them to share info I get Connection was aborted by the remote WINS in the event log. I can see the IP addresses for the remote network through the DHCP manager. Any ideas on what I should do to be able to browse the remote network and also set it up so that I can administer it remotely, would be greatly appreciated.

A:{Advice Offered} - Domain Browsing in a Multi-Domain Environment

Read other 6 answers

dear all

i have a problem in adding addtional domain controller in my forest domain.

when i try to add additional; domain controller after working few miniutes it gives meessage THE ACTIVE DIRECTORY WIZARD IS UNABLE TO CONVERT THE COMPUTER TO DOMAIN CONTROLLER ACESSES DENIED


But the user name has full permission he is administrator

please help me

Read other answers


I hit major problems yesterday when a power surge killed my server (despite ups/surge protection!). We have a small set up of 15 win2k machines and one Windows server 2003 all connected under a domain.

Basically all user machines were unaffected but my only method of getting us up and running was installing a fresh version of 2003 server on a new machine. i followed this guide and configured it to use the same domain as last time (hoping that all the client machines would carry on as they were before the server out). i've managed to set up access to shared drives hosted on the network. That is working.

However i am now having these problems on all client machines

Client machines cannot connect to shared printers from another client machine. - Logging on as an administrator to their machine locally (not domain) you can add and print. Simply changing their policies to admin does not allow them access.
Each machines is still connected to the domain (so it says) but if you take them off and try to put them back on the domain i get this error:the following error occurred attempting to join the domain " ". network path was not found
If somebody can help me out i would be very gratefull. I'm alright with basic networking but have never installed Win server from fresh. I like to think i've just missed a simple checkbox or similar!? I've basically followed the guide and have done little else in way of changes, so you should be able to get a good i... Read more

A:Complete Domain Issue! Shared printers & adding domain

Read other 16 answers

Dear Community,

My company use around 700 desktops and laptops on a domain. our file server has a home share drive that the AD links to and then maps when a user logs onto any machine when using their domain account. my problem when I log onto my normal laptop
it says network name is no longer available. when I log onto another machine it connects and maps normally. all other servers UNC name works normally. I can ping it by DNS and IP and can RDP to it but not see any shares.

Please can you help?

Read other answers


when i add win 7 client machine to a domain i got this error " an attempt to resolve the DNS name of a domain contrller in the domain being joined has failed" how to solve it . plz help

Read other answers

I'm running into a problem with connecting to network drives over a VPN. The common difference is whether or not the computer is part of the domain by default.

1) Computers connecting to VPN using local account on computer: Prompted for a domain login when attempting to use the network drives. Can get in.

2) Computers connecting to VPN using a domain account (but on another network): Unable to connect. Specific error changed based on below info.
A) Computer logged on and connected to an outside network. Never connected to domain network: Can't find folder error.
B) Connects to domain network at some point before connecting to an outside network and using VPN: Might be in use error, attached.

A:VPN Network Shared Drive Error Domain/Non-Domain Differences

Sounds more like the network the VPN connection puts you in has trouble making kerberos connections to domain controllers, but NTLM connections work fine (kerb might be blocked). The errors are likely bogus if you can get #1 to work - if the computer is connected to a domain it's going to want to use Kerb before NTLM, and if the machine still has (what it thinks is) a viable kerb ticket, it's going to try and validate that with a DC (to achieve auth), and if this fails, so does the connection.

This may not actually be the case, of course, but it sure has the symptoms of it.

Read other 1 answers

i create a domain policy and create a restricted group for IT, the restricted group named "Local Admin".
i want to add a domain user to one computer local administrator group now.
so i launched the Administrators group and add  the domain user "Huadong Yu" into the Administrators group.
and the domain user can have the administrator right in this computer.
but domain user "Huadong Yu" will be lost from Administrators Group after the computer restart.
but i do this action in Windows XP is OK.
the domain user "Huadong Yu" still in the Administrators group after the computer restart.


Read other answers