500pts 4 success) WEIRD-Adding user to local administrators group BREAKS IE6 website.
Posted on 2003-11-19
windows 2000 small business server with 7 windows xp pro clients attached.
QUICK SUMMARY OF PROBLEM
When a user is given Local Machine Administrator rights at CPUMary, things break. Perhaps there is a local machine group policy somewhere that says "Administrators are denied" from doing something? But I am a rookie at network administration, so I don't know how to find it. I hope someone can help.
LONG WINDED SUMMARY OF PROBLEM
One of our 7 client computers, CPUMary, gets a website Navigation Error FAR more often than it should. (see Note 1 below.) This is a new computer that was purchased with window xp home and upgraded to windows xp pro.
The problem happens for every user that use CPUMary, but only after their name has been added to the Local Computer Administrators group. If I remove their name from the group, the problem goes away.
For instance, our standard computer setup procedures give the primary user administrative rights. When I set up CPUMary several weeks ago, I right clicked My Computer > manage > local users and groups > groups > administrators > and added MaryRoe.
Since then, MaryRoe has had this problem, but JohnDoe can use CPUMary with no problem. If I add JohnDoe to local administrators, he is also broken till I remove him from group. I can't remove Mary permanently because she needs administrative priviledger for Norton Antivirus etc. If I remove her temporarily, the navigation problem goes away.
On CPUJohn nobody has the problem-it doesn't matter if Mary or John are administrators or not.
HELP. Right now, I think I am going to have to reinstall windows, but I just did that 2 weeks ago, so I'm not sure it will work. If someone can help me fix this without a reinstall, its worth 500pts.
Note1. If I am correct that a Deny Rule is operating, our specific web site problem is irrelevant, so I don't want you to focus on it. But, because you'll surely want to know, here is an explanation:
All 7 of my users frequently go to a government web site. The site is pretty smart and ENFORCES its own "previous" and "next" buttons. If users accidentally click the IE6 standard Back and Forward buttons, the web site says "Navigation Error! Please use 'previous' and 'next' buttons, instead of your browser's navigation controls." This is a "normal error message" which only happens when a user does something wrong.
When any user is added to CPUMary's Local Administrators Group, that user starts getting Navigation Error! on 90% of its controls even when the user did nothing wrong. It only happens on CPUMary.
Note2. I called the website help desk. They said to remove firewall, but that did not help. They cannot offer other advise except to say that thousands of other users are not having this problem.