Solved

500pts 4 success) WEIRD-Adding user to local administrators group BREAKS IE6 website.

Posted on 2003-11-19
9
381 Views
Last Modified: 2013-12-04
windows 2000 small business server with 7 windows xp pro clients attached.

QUICK SUMMARY OF PROBLEM

When a user is given Local Machine Administrator rights at CPUMary, things break. Perhaps there is a local machine group policy somewhere that says "Administrators are denied" from doing something? But I am a rookie at network administration, so I don't know how to find it.  I hope someone can help.  

LONG WINDED SUMMARY OF PROBLEM

One of our 7 client computers, CPUMary, gets a website Navigation Error FAR more often than it should.  (see Note 1 below.)  This is a new computer that was purchased with window xp home and upgraded to windows xp pro.

The problem happens for every user that use CPUMary, but only after their name has been added to the Local Computer Administrators group.  If I remove their name from the group, the problem goes away.

For instance, our standard computer setup procedures give the primary user administrative rights. When I set up CPUMary several weeks ago, I right clicked My Computer > manage > local users and groups > groups > administrators > and added MaryRoe.

Since then, MaryRoe has had this problem, but JohnDoe can use CPUMary with no problem.  If I add JohnDoe to local administrators, he is also broken till I remove him from group. I can't remove Mary permanently because she needs administrative priviledger for Norton Antivirus etc.  If I remove her temporarily, the navigation problem goes away.

On CPUJohn nobody has the problem-it doesn't matter if Mary or John are administrators or not.
 
HELP. Right now, I think I am going to have to reinstall windows, but I just did that 2 weeks ago, so I'm not sure it will work.  If someone can help me fix this without a reinstall, its worth 500pts.

RBerke

Note1.  If I am correct that a Deny Rule is operating, our specific web site problem is irrelevant, so I don't want you to focus on it.  But, because you'll surely want to know,  here is an explanation:

All 7 of my users frequently go to a government web site. The site is pretty smart and ENFORCES its own "previous" and "next" buttons.  If users accidentally click the IE6 standard Back and Forward buttons, the web site says "Navigation Error! Please use 'previous' and 'next' buttons, instead of your browser's navigation controls."  This is a "normal error message" which only happens when a user does something wrong.

When any user is added to CPUMary's Local Administrators Group, that user starts getting Navigation Error! on 90% of its controls even when the user did nothing wrong. It only happens on CPUMary.

Note2.  I called the website help desk. They said to remove firewall, but that did not help. They cannot offer other advise except to say that thousands of other users are not having this problem.
0
Comment
Question by:rberke
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 4
9 Comments
 
LVL 3

Expert Comment

by:Mr_Skinny
ID: 9786682

Why do they need admin privs for Norton Anti-virus?
0
 
LVL 5

Author Comment

by:rberke
ID: 9788704
When I remove them from admins, everytime they send an e-mail that get an error message saying "cannot read subscription data. you may need adminstrator priviledges".

But, ignore Norton for a second. My consultant, (he is MSCE and an instructor at local college) tells me it is "best practice" to have the computer's main user user be in the LOCAL administrator group.  Naturally, it would be stupid to give them Domain administrative priviledges.  

So, before you suggest workarounds for Norton, let me know if you think his "best practice" is wrong.
0
 
LVL 3

Expert Comment

by:Mr_Skinny
ID: 9789755

I would tend to agree with that, unless you really want to restrict the users.  Are all the other machines upgrades from XP home to Pro or are they full versions of Pro?
0
Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 5

Author Comment

by:rberke
ID: 9791260
At least one other xp home to xp pro upgrade machine is working fine.
0
 
LVL 3

Expert Comment

by:Mr_Skinny
ID: 9791957
Hmmm... this is a stange one.  I can only assume (somewhat obviously i might add!) that there is something particularly different about this machine.  Did you setup the other machines as well or just this one? and are there any diffrences in hardware/software between the problem machine and the others?

I know were not getting anywhere so far, but it would be nice to eliminate anything obvious!
0
 
LVL 5

Author Comment

by:rberke
ID: 9792191
all computers are different.  I set up most of them. Do you know anything about group policies?  Is there a way to search for every group policy that involves Administrator.

Or, is there a way to simpy print every group policy?
0
 
LVL 3

Accepted Solution

by:
Mr_Skinny earned 200 total points
ID: 9795654
0
 
LVL 5

Author Comment

by:rberke
ID: 9798058
Thanks, I'll look at that over the weekend
0
 
LVL 5

Author Comment

by:rberke
ID: 9839012
Turns out it had nothing to do with group policies. I reinstalled Norton Antivirus and the problem went away.

0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Many of us in IT utilize a combination of roaming profiles and folder redirection to ensure user information carries over from one workstation to another; in my environment, it was to enable virtualization without needing a separate desktop for each…
OfficeMate Freezes on login or does not load after login credentials are input.
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question