A vista box is joined to a WIN2K Domain. When a normal user is made logon for the first time it simply hangs in between and gives. Windows Mail error with OK button. After that nothing happens. Even after trying with diff users. When the same user is made member of local admin gropup of the Vista box, it logins perfectly. SO I thought it is ACL problem with the prfile folder i.e, \users\username and updating registry for the first time. I changed all the ACls to full control for the user and then tried again but in vein. Can somebody help this out. Domain: WIN2K AD Vista BOX: Preloaded HP Laptop.
Before moving on, please check your Windows Vista Edition first. Right click on Computer, choose properties. You will see your Windows Vista edition. Please note Windows Vista Home Basic and Windows Vista Home Premium cannot join in domain by design. For more information: You cannot join a Windows Vista Home Premium-based computer to a domain http://support.microsoft.com/kb/929543/en-us If you are not using above editions, please refer the following article to double check your steps: Joining a Windows Vista Wired Client to a Domain http://technet.microsoft.com/en-us/library/bb727031(TechNet.10).aspx -- Carey Frisch Microsoft MVP Windows Desktop Experience - Windows Vista Enthusiast --------------------------------------------------------------- "sudhi_shrivatsa" wrote in message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... A vista box is joined to a WIN2K Domain. When a normal user is made logon for the first time it simply hangs in between and gives. Windows Mail error with OK button. After that nothing happens. Even after trying with diff users. When the same user is made member of local admin gropup of the Vista box, it logins perfectly. SO I thought it is ACL problem with the prfile folder i.e, \users\username and updating registry for the first time. I changed all the ACls to full control for the user and then tried again but in vein. Can somebody help this out. Domain: WIN2K AD Vista BOX: Preloaded HP Laptop.
Its a buisness edition. Please read my threrad carefully " When the same user is made member of local admin gropup of the Vista box, it logins perfectly." I mean to say after joining the domain the user is made member of the local laptop admin group. User can logon to domain successfully. Sudhi... "Carey Frisch [MVP]" wrote: > Before moving on, please check your Windows Vista Edition first. > > Right click on Computer, choose properties. You will see your Windows Vista edition. > > Please note Windows Vista Home Basic and Windows Vista Home Premium cannot join in domain by design. > > For more information: > > You cannot join a Windows Vista Home Premium-based computer to a domain > http://support.microsoft.com/kb/929543/en-us > > If you are not using above editions, please refer the following article to double check your steps: > > Joining a Windows Vista Wired Client to a Domain > http://technet.microsoft.com/en-us/library/bb727031(TechNet.10).aspx > > -- > Carey Frisch > Microsoft MVP > Windows Desktop Experience - > Windows Vista Enthusiast > > --------------------------------------------------------------- > > "sudhi_shrivatsa" wrote in message > news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... > A vista box is joined to a WIN2K Domain. When a normal user is made logon for > the first time it simply hangs in between and gives. Windows Mail error with > OK button. After that nothing happens. Even after trying with diff users. > When the same user is made member of local admin gropup of the Vista box, it > logins perfectly. > > SO I thought it is ACL problem with the prfile folder i.e, \users\username > and updating registry for the first time. > > I changed all the ACls to full control for the user and then tried again but > in vein. Can somebody help this out. > > Domain: WIN2K AD > Vista BOX: Preloaded HP Laptop. > >
"sudhi_shrivatsa" wrote in message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... >A vista box is joined to a WIN2K Domain. When a normal user is made logon >for > the first time it simply hangs in between and gives. Windows Mail error > with > OK button. After that nothing happens. Even after trying with diff users. > When the same user is made member of local admin gropup of the Vista box, > it > logins perfectly. > > SO I thought it is ACL problem with the prfile folder i.e, \users\username > and updating registry for the first time. > > I changed all the ACls to full control for the user and then tried again > but > in vein. Can somebody help this out. > > Domain: WIN2K AD > Vista BOX: Preloaded HP Laptop. > It sounds like something in your logon script requires local admin privileges. Try disabling any logon scripts. If this works then you'll have to troubleshoot the script to see what is causing the problem. -- Kerry Brown MS-MVP - Windows Desktop Experience: Systems Administration http://www.vistahelp.ca/phpBB2/
Kerry, No logon script per user or laptop is set. Its a just a logon nothing else happens in the background. Sudhi... "Kerry Brown" wrote: > "sudhi_shrivatsa" wrote in > message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... > >A vista box is joined to a WIN2K Domain. When a normal user is made logon > >for > > the first time it simply hangs in between and gives. Windows Mail error > > with > > OK button. After that nothing happens. Even after trying with diff users. > > When the same user is made member of local admin gropup of the Vista box, > > it > > logins perfectly. > > > > SO I thought it is ACL problem with the prfile folder i.e, \users\username > > and updating registry for the first time. > > > > I changed all the ACls to full control for the user and then tried again > > but > > in vein. Can somebody help this out. > > > > Domain: WIN2K AD > > Vista BOX: Preloaded HP Laptop. > > > > > It sounds like something in your logon script requires local admin > privileges. Try disabling any logon scripts. If this works then you'll have > to troubleshoot the script to see what is causing the problem. > > -- > Kerry Brown > MS-MVP - Windows Desktop Experience: Systems Administration > http://www.vistahelp.ca/phpBB2/ > > >
Do you have UAC turned off? What is the error you talked about in your first post? Are there any errors in the event logs? -- Kerry Brown MS-MVP - Windows Desktop Experience: Systems Administration http://www.vistahelp.ca/phpBB2/ "sudhi_shrivatsa" wrote in message news:D5AC5637-11AE-4385-9B05-BA00A316A1CF@microsoft.com... > Kerry, > > No logon script per user or laptop is set. Its a just a logon nothing else > happens in the background. > > Sudhi... > > "Kerry Brown" wrote: > >> "sudhi_shrivatsa" wrote in >> message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... >> >A vista box is joined to a WIN2K Domain. When a normal user is made >> >logon >> >for >> > the first time it simply hangs in between and gives. Windows Mail error >> > with >> > OK button. After that nothing happens. Even after trying with diff >> > users. >> > When the same user is made member of local admin gropup of the Vista >> > box, >> > it >> > logins perfectly. >> > >> > SO I thought it is ACL problem with the prfile folder i.e, >> > \users\username >> > and updating registry for the first time. >> > >> > I changed all the ACls to full control for the user and then tried >> > again >> > but >> > in vein. Can somebody help this out. >> > >> > Domain: WIN2K AD >> > Vista BOX: Preloaded HP Laptop. >> > >> >> >> It sounds like something in your logon script requires local admin >> privileges. Try disabling any logon scripts. If this works then you'll >> have >> to troubleshoot the script to see what is causing the problem. >> >> -- >> Kerry Brown >> MS-MVP - Windows Desktop Experience: Systems Administration >> http://www.vistahelp.ca/phpBB2/ >> >> >>
Hmmmm No UAC is not turned OFF. Let me explain you the whole process once again. Installed Vista on Laptop>>> Joined it to a Domain with Domain Admin credentials.>> Joining to domain was success>> Rebooted, Domain admin login successfull.>> Now Loged OFF and tried to login with a Domain User Account>> Welcome Preparing Desktop Message>>> Windows Mail Errro>> NO further activity>> Desktop did not appear. Thats the problem. Now why I thought its a ACL problem? When I logged in withh Local Admin and browsed users folder there was no %username% folder was created. >> then I made that perticular domain user the member of Local Admin group(Laptop Built in admin Group)>>>Voila The Domain User account login successfull. Now why cant a normal user login? Hope @least this time I am clear. Cheers, Sudhi... "Kerry Brown" wrote: > Do you have UAC turned off? What is the error you talked about in your first > post? Are there any errors in the event logs? > > -- > Kerry Brown > MS-MVP - Windows Desktop Experience: Systems Administration > http://www.vistahelp.ca/phpBB2/ > > > > "sudhi_shrivatsa" wrote in > message news:D5AC5637-11AE-4385-9B05-BA00A316A1CF@microsoft.com... > > Kerry, > > > > No logon script per user or laptop is set. Its a just a logon nothing else > > happens in the background. > > > > Sudhi... > > > > "Kerry Brown" wrote: > > > >> "sudhi_shrivatsa" wrote in > >> message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... > >> >A vista box is joined to a WIN2K Domain. When a normal user is made > >> >logon > >> >for > >> > the first time it simply hangs in between and gives. Windows Mail error > >> > with > >> > OK button. After that nothing happens. Even after trying with diff > >> > users. > >> > When the same user is made member of local admin gropup of the Vista > >> > box, > >> > it > >> > logins perfectly. > >> > > >> > SO I thought it is ACL problem with the prfile folder i.e, > >> > \users\username > >> > and updating registry for the first time. > >> > > >> > I changed all the ACls to full control for the user and then tried > >> > again > >> > but > >> > in vein. Can somebody help this out. > >> > > >> > Domain: WIN2K AD > >> > Vista BOX: Preloaded HP Laptop. > >> > > >> > >> > >> It sounds like something in your logon script requires local admin > >> privileges. Try disabling any logon scripts. If this works then you'll > >> have > >> to troubleshoot the script to see what is causing the problem. > >> > >> -- > >> Kerry Brown > >> MS-MVP - Windows Desktop Experience: Systems Administration > >> http://www.vistahelp.ca/phpBB2/ > >> > >> > >> >
I suspect something is running on login that needs admin privileges. Are you pushing out any applications with group policy? Domain Users do not have to be local admins. -- Kerry Brown MS-MVP - Windows Desktop Experience: Systems Administration http://www.vistahelp.ca/phpBB2/ "sudhi_shrivatsa" wrote in message news:FA8C6913-CBAC-4FB1-B960-4851D65EBB8F@microsoft.com... > Hmmmm No UAC is not turned OFF. Let me explain you the whole process once > again. > Installed Vista on Laptop>>> Joined it to a Domain with Domain Admin > credentials.>> Joining to domain was success>> Rebooted, Domain admin > login > successfull.>> Now Loged OFF and tried to login with a Domain User > Account>> > Welcome Preparing Desktop Message>>> Windows Mail Errro>> NO further > activity>> Desktop did not appear. > > Thats the problem. > > Now why I thought its a ACL problem? When I logged in withh Local Admin > and > browsed users folder there was no %username% folder was created. >> then > I > made that perticular domain user the member of Local Admin group(Laptop > Built > in admin Group)>>>Voila The Domain User account login successfull. > > Now why cant a normal user login? > > Hope @least this time I am clear. > > Cheers, > Sudhi... > > "Kerry Brown" wrote: > >> Do you have UAC turned off? What is the error you talked about in your >> first >> post? Are there any errors in the event logs? >> >> -- >> Kerry Brown >> MS-MVP - Windows Desktop Experience: Systems Administration >> http://www.vistahelp.ca/phpBB2/ >> >> >> >> "sudhi_shrivatsa" wrote in >> message news:D5AC5637-11AE-4385-9B05-BA00A316A1CF@microsoft.com... >> > Kerry, >> > >> > No logon script per user or laptop is set. Its a just a logon nothing >> > else >> > happens in the background. >> > >> > Sudhi... >> > >> > "Kerry Brown" wrote: >> > >> >> "sudhi_shrivatsa" wrote in >> >> message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... >> >> >A vista box is joined to a WIN2K Domain. When a normal user is made >> >> >logon >> >> >for >> >> > the first time it simply hangs in between and gives. Windows Mail >> >> > error >> >> > with >> >> > OK button. After that nothing happens. Even after trying with diff >> >> > users. >> >> > When the same user is made member of local admin gropup of the Vista >> >> > box, >> >> > it >> >> > logins perfectly. >> >> > >> >> > SO I thought it is ACL problem with the prfile folder i.e, >> >> > \users\username >> >> > and updating registry for the first time. >> >> > >> >> > I changed all the ACls to full control for the user and then tried >> >> > again >> >> > but >> >> > in vein. Can somebody help this out. >> >> > >> >> > Domain: WIN2K AD >> >> > Vista BOX: Preloaded HP Laptop. >> >> > >> >> >> >> >> >> It sounds like something in your logon script requires local admin >> >> privileges. Try disabling any logon scripts. If this works then you'll >> >> have >> >> to troubleshoot the script to see what is causing the problem. >> >> >> >> -- >> >> Kerry Brown >> >> MS-MVP - Windows Desktop Experience: Systems Administration >> >> http://www.vistahelp.ca/phpBB2/ >> >> >> >> >> >> >>
Suspecious? rt But let me clear you this point the DC has never gone in a change for the last 2years. I have checked there's nothing which is running during logon. Sudhi "Kerry Brown" wrote: > I suspect something is running on login that needs admin privileges. Are you > pushing out any applications with group policy? Domain Users do not have to > be local admins. > > -- > Kerry Brown > MS-MVP - Windows Desktop Experience: Systems Administration > http://www.vistahelp.ca/phpBB2/ > > > > "sudhi_shrivatsa" wrote in > message news:FA8C6913-CBAC-4FB1-B960-4851D65EBB8F@microsoft.com... > > Hmmmm No UAC is not turned OFF. Let me explain you the whole process once > > again. > > Installed Vista on Laptop>>> Joined it to a Domain with Domain Admin > > credentials.>> Joining to domain was success>> Rebooted, Domain admin > > login > > successfull.>> Now Loged OFF and tried to login with a Domain User > > Account>> > > Welcome Preparing Desktop Message>>> Windows Mail Errro>> NO further > > activity>> Desktop did not appear. > > > > Thats the problem. > > > > Now why I thought its a ACL problem? When I logged in withh Local Admin > > and > > browsed users folder there was no %username% folder was created. >> then > > I > > made that perticular domain user the member of Local Admin group(Laptop > > Built > > in admin Group)>>>Voila The Domain User account login successfull. > > > > Now why cant a normal user login? > > > > Hope @least this time I am clear. > > > > Cheers, > > Sudhi... > > > > "Kerry Brown" wrote: > > > >> Do you have UAC turned off? What is the error you talked about in your > >> first > >> post? Are there any errors in the event logs? > >> > >> -- > >> Kerry Brown > >> MS-MVP - Windows Desktop Experience: Systems Administration > >> http://www.vistahelp.ca/phpBB2/ > >> > >> > >> > >> "sudhi_shrivatsa" wrote in > >> message news:D5AC5637-11AE-4385-9B05-BA00A316A1CF@microsoft.com... > >> > Kerry, > >> > > >> > No logon script per user or laptop is set. Its a just a logon nothing > >> > else > >> > happens in the background. > >> > > >> > Sudhi... > >> > > >> > "Kerry Brown" wrote: > >> > > >> >> "sudhi_shrivatsa" wrote in > >> >> message news:ED5A0116-3FBE-4AF8-ABEC-4839FFA34EDD@microsoft.com... > >> >> >A vista box is joined to a WIN2K Domain. When a normal user is made > >> >> >logon > >> >> >for > >> >> > the first time it simply hangs in between and gives. Windows Mail > >> >> > error > >> >> > with > >> >> > OK button. After that nothing happens. Even after trying with diff > >> >> > users. > >> >> > When the same user is made member of local admin gropup of the Vista > >> >> > box, > >> >> > it > >> >> > logins perfectly. > >> >> > > >> >> > SO I thought it is ACL problem with the prfile folder i.e, > >> >> > \users\username > >> >> > and updating registry for the first time. > >> >> > > >> >> > I changed all the ACls to full control for the user and then tried > >> >> > again > >> >> > but > >> >> > in vein. Can somebody help this out. > >> >> > > >> >> > Domain: WIN2K AD > >> >> > Vista BOX: Preloaded HP Laptop. > >> >> > > >> >> > >> >> > >> >> It sounds like something in your logon script requires local admin > >> >> privileges. Try disabling any logon scripts. If this works then you'll > >> >> have > >> >> to troubleshoot the script to see what is causing the problem. > >> >> > >> >> -- > >> >> Kerry Brown > >> >> MS-MVP - Windows Desktop Experience: Systems Administration > >> >> http://www.vistahelp.ca/phpBB2/ > >> >> > >> >> > >> >> > >> >
[Vista system hangs at initial login of a domain account] "Kerry Brown" wrote: >I suspect something is running on login that needs admin privileges. Are >you pushing out any applications with group policy? Domain Users do not >have to be local admins. Questions to the OP: * Has *any* Vista system been successful in logging on a nonprivileged domain user after being joined to the domain? * Have you tried logging in with a different domain account? * Have you talked to the domain administrators? Your computer and/or userid may be in an OU that's being pushed a non-Vista-compatible executable the failure of which causes a deadlock in an unprivileged environment. Alternatively, were any application installations done on the computer after Vista was installed? An application with an entry in Active Setup and/or Run/RunOnce in the default user configuration might be doing something requiring privileges and hanging if they aren't available. Have you considered setting the machine to audit privilege requests? And even without the audit logs, have you examined the event logs to see if something interesting was written? Joe Morris
Had done all this but no avail. There are other Vista Boxes and laptop which are running smoothly. Although they were installed a year ago. Same configuration and same install procedure was used. No change @ all. All were using the same domain. No ou level policies are set here. It gives Windows Mail ........(ole32.dll) failed. And then just stops @ that. I suspect that it fails while setting the personlised settings when a user logs in for the first time. If made to login with admin prevlgs it logs perfectly. Sudhi... "Joe Morris" wrote: > [Vista system hangs at initial login of a domain account] > > "Kerry Brown" wrote: > > >I suspect something is running on login that needs admin privileges. Are > >you pushing out any applications with group policy? Domain Users do not > >have to be local admins. > > Questions to the OP: > > * Has *any* Vista system been successful in logging on a nonprivileged > domain user after being joined to the domain? > * Have you tried logging in with a different domain account? > * Have you talked to the domain administrators? Your computer and/or userid > may be in an OU that's being pushed a non-Vista-compatible executable the > failure of which causes a deadlock in an unprivileged environment. > > Alternatively, were any application installations done on the computer after > Vista was installed? An application with an entry in Active Setup and/or > Run/RunOnce in the default user configuration might be doing something > requiring privileges and hanging if they aren't available. Have you > considered setting the machine to audit privilege requests? And even > without the audit logs, have you examined the event logs to see if something > interesting was written? > > Joe Morris > > >
I agree with Joe about the logs. If you get an error message there should be an event logged. -- Kerry Brown MS-MVP - Windows Desktop Experience: Systems Administration http://www.vistahelp.ca/phpBB2/ "sudhi_shrivatsa" wrote in message news:2A8199B5-86C1-471F-8EDA-5CC7EB4633E2@microsoft.com... > Had done all this but no avail. There are other Vista Boxes and laptop > which > are running smoothly. Although they were installed a year ago. Same > configuration and same install procedure was used. No change @ all. All > were > using the same domain. No ou level policies are set here. > It gives Windows Mail ........(ole32.dll) failed. And then just stops @ > that. I suspect that it fails while setting the personlised settings when > a > user logs in for the first time. If made to login with admin prevlgs it > logs > perfectly. > > Sudhi... > > > "Joe Morris" wrote: > >> [Vista system hangs at initial login of a domain account] >> >> "Kerry Brown" wrote: >> >> >I suspect something is running on login that needs admin privileges. Are >> >you pushing out any applications with group policy? Domain Users do not >> >have to be local admins. >> >> Questions to the OP: >> >> * Has *any* Vista system been successful in logging on a nonprivileged >> domain user after being joined to the domain? >> * Have you tried logging in with a different domain account? >> * Have you talked to the domain administrators? Your computer and/or >> userid >> may be in an OU that's being pushed a non-Vista-compatible executable the >> failure of which causes a deadlock in an unprivileged environment. >> >> Alternatively, were any application installations done on the computer >> after >> Vista was installed? An application with an entry in Active Setup and/or >> Run/RunOnce in the default user configuration might be doing something >> requiring privileges and hanging if they aren't available. Have you >> considered setting the machine to audit privilege requests? And even >> without the audit logs, have you examined the event logs to see if >> something >> interesting was written? >> >> Joe Morris >> >> >>
I do agree I have asked them forward the log to me. I will update then. Sudhi... "Kerry Brown" wrote: > I agree with Joe about the logs. If you get an error message there should be > an event logged. > > -- > Kerry Brown > MS-MVP - Windows Desktop Experience: Systems Administration > http://www.vistahelp.ca/phpBB2/ > > > > "sudhi_shrivatsa" wrote in > message news:2A8199B5-86C1-471F-8EDA-5CC7EB4633E2@microsoft.com... > > Had done all this but no avail. There are other Vista Boxes and laptop > > which > > are running smoothly. Although they were installed a year ago. Same > > configuration and same install procedure was used. No change @ all. All > > were > > using the same domain. No ou level policies are set here. > > It gives Windows Mail ........(ole32.dll) failed. And then just stops @ > > that. I suspect that it fails while setting the personlised settings when > > a > > user logs in for the first time. If made to login with admin prevlgs it > > logs > > perfectly. > > > > Sudhi... > > > > > > "Joe Morris" wrote: > > > >> [Vista system hangs at initial login of a domain account] > >> > >> "Kerry Brown" wrote: > >> > >> >I suspect something is running on login that needs admin privileges. Are > >> >you pushing out any applications with group policy? Domain Users do not > >> >have to be local admins. > >> > >> Questions to the OP: > >> > >> * Has *any* Vista system been successful in logging on a nonprivileged > >> domain user after being joined to the domain? > >> * Have you tried logging in with a different domain account? > >> * Have you talked to the domain administrators? Your computer and/or > >> userid > >> may be in an OU that's being pushed a non-Vista-compatible executable the > >> failure of which causes a deadlock in an unprivileged environment. > >> > >> Alternatively, were any application installations done on the computer > >> after > >> Vista was installed? An application with an entry in Active Setup and/or > >> Run/RunOnce in the default user configuration might be doing something > >> requiring privileges and hanging if they aren't available. Have you > >> considered setting the machine to audit privilege requests? And even > >> without the audit logs, have you examined the event logs to see if > >> something > >> interesting was written? > >> > >> Joe Morris > >> > >> > >> >
"sudhi_shrivatsa" wrote: > "Kerry Brown" wrote: > >> I agree with Joe about the logs. If you get an error message there should >> be >> an event logged. >I do agree I have asked them forward the log to me. I will update then. Um...just to make sure we're on the same page: the event logs that are most likely to help are the ones from your Vista machine, not from the domain controllers. Your note sounds like "them" means the domain admins since your earlier postings suggest that you've got the machine in front of you. Joe
