pauluk83 Posted June 7, 2008 Share Posted June 7, 2008 hey allmy problem isi need to run a domain controler so i can have roaming profiles so my mates can have there own areas on the pcsi would like to try server 2008 enterprise as i have a copy given to me by ms. problem is vista vould not connect to the controoler kept giving me errors about cannt find serverand the users need to be able to log on to the domain controler, i e user can log on to my laptop or to the server depends witch is in use at the time, but it kept saying that the user didnt have rights to logon to the domain controller.please help as it is doing my head in with my matescheers Link to comment Share on other sites More sharing options...
FAT64 Posted June 8, 2008 Share Posted June 8, 2008 By default, ordinary users cannot logon locally to a Domain Controller. You will have to give them permission (something I wouldn't recommend). In Windows 2000, there is a utility called "Domain Controller Security Policy", expand Local Policy>User Rights Assignment and add "Authenticated Users" to the "Logon Locally" policy.As to not finding the Domain Controller, a client uses DNS to locate a Domain Controller, try putting the IP address of the Domain Controller in the TCP/IP settings of the client. Link to comment Share on other sites More sharing options...
pauluk83 Posted June 9, 2008 Author Share Posted June 9, 2008 By default, ordinary users cannot logon locally to a Domain Controller. You will have to give them permission (something I wouldn't recommend). In Windows 2000, there is a utility called "Domain Controller Security Policy", expand Local Policy>User Rights Assignment and add "Authenticated Users" to the "Logon Locally" policy.As to not finding the Domain Controller, a client uses DNS to locate a Domain Controller, try putting the IP address of the Domain Controller in the TCP/IP settings of the client.but i dont see Domain Controller Security Policy, only Local Security Policy Link to comment Share on other sites More sharing options...
FAT64 Posted June 9, 2008 Share Posted June 9, 2008 1. Open GPMC, click Start, click Run, type gpmc.msc, and then click OK.2. In the console tree, right-click Default Domain Controllers Policy in Domains\Current Domain Name\Group Policy objects\Default Domain Controllers Policy, and then click Edit. 3. In the Group Policy Management Editor window, in the console tree, go to Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/User Rights AssignmentLike I said, that was for a Windows 2000 DC, try the above. Link to comment Share on other sites More sharing options...
pauluk83 Posted June 11, 2008 Author Share Posted June 11, 2008 1. Open GPMC, click Start, click Run, type gpmc.msc, and then click OK.2. In the console tree, right-click Default Domain Controllers Policy in Domains\Current Domain Name\Group Policy objects\Default Domain Controllers Policy, and then click Edit. 3. In the Group Policy Management Editor window, in the console tree, go to Computer Configuration/Policies/Windows Settings/Security Settings/Local Policies/User Rights AssignmentLike I said, that was for a Windows 2000 DC, try the above.ok i found the area u mentioned, but u cannot find log on locally, i got log on as a service though, any help? Link to comment Share on other sites More sharing options...
pauluk83 Posted June 12, 2008 Author Share Posted June 12, 2008 (edited) ok i found log on locally evenutually, i have enabled it, BUT when a user tries to log on i get a message saying""You cannot log on because the logon method you are using is not allowed onthis computer. Please see you network administrator for more details." well i am the F**king admin. lolalso how do i get rid of the user password complexity and histor ect for users of the domain Edited June 12, 2008 by pauluk83 Link to comment Share on other sites More sharing options...
pauluk83 Posted June 14, 2008 Author Share Posted June 14, 2008 hey all still having probelms...i have got the setup working now just having issies with roaming profiles.i got a user set up, but when loging on i get the following in the event log,"Log Name: ApplicationSource: Microsoft-Windows-User Profiles ServiceDate: 14/06/2008 21:46:48Event ID: 1521Task Category: NoneLevel: ErrorKeywords: ClassicUser: PSPAGE\pspageComputer: server.pspage.localDescription:Windows cannot locate the server copy of your roaming profile and is attempting to log you on with your local profile. Changes to the profile will not be copied to the server when you log off. This error may be caused by network problems or insufficient security rights. DETAIL - Access is denied. Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" EventSourceName="profsvc" /> <EventID Qualifiers="49152">1521</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2008-06-14T20:46:48.000Z" /> <EventRecordID>289</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>server.pspage.local</Computer> <Security UserID="S-1-5-21-664250057-3065096007-1029384459-1108" /> </System> <EventData Name="EVENT_CENTRAL_NOT_AVAILABLE_DISABLE"> <Data Name="Error">Access is denied. </Data> </EventData></Event>"I have tin the user account, in the profile tab i have the following in the profile path i have :\\Server\netlogon\pspageand i have set the home directory to drive z: \\Server\netlogon\Documents\pspageobviosly the netlogon folder was already created i just added the documents folder and shared it, with the following, users with full controlcreator ower, authenticated users, the user who is loged on so in the case paul s page, system, administrators, and server operators.so how can it still be denided accsess when the user has full accsess on that share?any help?paul Link to comment Share on other sites More sharing options...
pauluk83 Posted June 15, 2008 Author Share Posted June 15, 2008 (edited) . Edited June 16, 2008 by pauluk83 Link to comment Share on other sites More sharing options...
pauluk83 Posted June 16, 2008 Author Share Posted June 16, 2008 any1?i really need this to work asap to get it all setup and working Link to comment Share on other sites More sharing options...
Tripredacus Posted June 16, 2008 Share Posted June 16, 2008 I suppose on the Vista machines you have already had them stop being in a workgroup right? Link to comment Share on other sites More sharing options...
pauluk83 Posted June 16, 2008 Author Share Posted June 16, 2008 i am using a vm at the moment just till i figured this out, so its on the same vm, users can logon on a temp profile Link to comment Share on other sites More sharing options...
pauluk83 Posted June 20, 2008 Author Share Posted June 20, 2008 i still dont know what is causing this, any1 got any pointers? Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now