Certain commands are not accessable to machine administrator accou

Had a major operating system failure on a PC. Hardware tests indicated on
malfunctions. Windows Restore would not work. Used the PC manufacturer's
Operating System Restore tool (essential a clean install). Machine was
rejoined to a domain. No users, except those with domain administrator
accounts may log into the domain. Domain and Local Machine Administrators
are prevented from removing the computer from the domain and returning it to
a workgroup status.

IPA is static. Gateway DNS and WINS are correct. Yet, machine attempts to
locate and authenticate with a commercial ISP DNS whenever someone logs on.

Can anything be done about this?

Your OS restore probably successfully kept all the old data, and this has
caused a conflict in security settings for the files.

HOW TO Reset Security Settings Back to the Defaults:
http://support.microsoft.com/default...b;en-us;313222

--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales...eAPostAsAnswer
Mark L. Ferguson
..

"Bradwin" <Bradwin@discussions.microsoft.com> wrote in message
news:60CF1AEC-0BF1-4D45-8422-595648984FD0@microsoft.com...
> Had a major operating system failure on a PC. Hardware tests indicated on
> malfunctions. Windows Restore would not work. Used the PC manufacturer's
> Operating System Restore tool (essential a clean install). Machine was
> rejoined to a domain. No users, except those with domain administrator
> accounts may log into the domain. Domain and Local Machine Administrators
> are prevented from removing the computer from the domain and returning it
> to
> a workgroup status.
>
> IPA is static. Gateway DNS and WINS are correct. Yet, machine attempts
> to
> locate and authenticate with a commercial ISP DNS whenever someone logs
> on.
>
> Can anything be done about this?

The advice to reset security settings to the default values made it possible
to withdraw from the domain. But, while it is still in the domain, standard
users are not allowed to log on interactively because of local security
policy. I have been through secpol.msc more than once. There is no setting
to allow or disallow interactive log on. This seems to be true even in group
policy, although I may have missed something there.

Thanks for the help.
Bradwin

"Mark L. Ferguson" wrote:

> Your OS restore probably successfully kept all the old data, and this has
> caused a conflict in security settings for the files.
>
> HOW TO Reset Security Settings Back to the Defaults:
> http://support.microsoft.com/default...b;en-us;313222
>
> --
> Was this helpful? Then click the Ratings button. Voting helps the web
> interface.
> http://www.microsoft.com/wn3/locales...eAPostAsAnswer
> Mark L. Ferguson
> .
>
> "Bradwin" <Bradwin@discussions.microsoft.com> wrote in message
> news:60CF1AEC-0BF1-4D45-8422-595648984FD0@microsoft.com...
> > Had a major operating system failure on a PC. Hardware tests indicated on
> > malfunctions. Windows Restore would not work. Used the PC manufacturer's
> > Operating System Restore tool (essential a clean install). Machine was
> > rejoined to a domain. No users, except those with domain administrator
> > accounts may log into the domain. Domain and Local Machine Administrators
> > are prevented from removing the computer from the domain and returning it
> > to
> > a workgroup status.
> >
> > IPA is static. Gateway DNS and WINS are correct. Yet, machine attempts
> > to
> > locate and authenticate with a commercial ISP DNS whenever someone logs
> > on.
> >
> > Can anything be done about this?
>

You may have something in the registry permissions beyond the default.
Aaron Stebner's WebLog Solving setup errors by using the SubInACL tool to
repair file and registry permissions:
http://blogs.msdn.com/astebner/archi...04/739820.aspx

--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales...eAPostAsAnswer
Mark L. Ferguson
..

"Bradwin" <Bradwin@discussions.microsoft.com> wrote in message
news:95285D12-2FDA-46A7-877E-4B828D9CF4C8@microsoft.com...
> The advice to reset security settings to the default values made it
> possible
> to withdraw from the domain. But, while it is still in the domain,
> standard
> users are not allowed to log on interactively because of local security
> policy. I have been through secpol.msc more than once. There is no
> setting
> to allow or disallow interactive log on. This seems to be true even in
> group
> policy, although I may have missed something there.
>
> Thanks for the help.
> Bradwin
>
> "Mark L. Ferguson" wrote:
>
>> Your OS restore probably successfully kept all the old data, and this has
>> caused a conflict in security settings for the files.
>>
>> HOW TO Reset Security Settings Back to the Defaults:
>> http://support.microsoft.com/default...b;en-us;313222
>>
>> --
>> Was this helpful? Then click the Ratings button. Voting helps the web
>> interface.
>> http://www.microsoft.com/wn3/locales...eAPostAsAnswer
>> Mark L. Ferguson
>> .
>>
>> "Bradwin" <Bradwin@discussions.microsoft.com> wrote in message
>> news:60CF1AEC-0BF1-4D45-8422-595648984FD0@microsoft.com...
>> > Had a major operating system failure on a PC. Hardware tests indicated
>> > on
>> > malfunctions. Windows Restore would not work. Used the PC
>> > manufacturer's
>> > Operating System Restore tool (essential a clean install). Machine
>> > was
>> > rejoined to a domain. No users, except those with domain
>> > administrator
>> > accounts may log into the domain. Domain and Local Machine
>> > Administrators
>> > are prevented from removing the computer from the domain and returning
>> > it
>> > to
>> > a workgroup status.
>> >
>> > IPA is static. Gateway DNS and WINS are correct. Yet, machine
>> > attempts
>> > to
>> > locate and authenticate with a commercial ISP DNS whenever someone logs
>> > on.
>> >
>> > Can anything be done about this?
>>