All new domain users are too restricted

Hi,

new to active directory, I'm trying to create multiple roaming profiles for a homework project. This should be easy enough as I have the instructions right in front of me. But as I'm following them I get stopped by a message when trying to access the computer's properties that says, "This operation has been canceled due to restrictions in effect on this computer..."

How do I remove these restrictions? They seem to be all of over the place and I don't know why. Any users I have created and all new users have heavy restrictions on their accounts. The Administrator account is also restricted. I'm not sure if it's proper but in my school environment I do not have all these restrictions.

Thanks,
Waffe
waffeAsked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Acosta Technology ServicesConnect With a Mentor Commented:
Check within Group Policy Management and see which GPO's are being applied across the domain.  Another good way to check is by running a "gpresult" from a machine and user account that's having issues, that will give you a list of applied policies for both the user account and the computer object.
0
 
Acosta Technology ServicesCommented:
Check the various group policies in the domain to see if there are restrictions being applied that way.
0
 
waffeAuthor Commented:
Thanks,

can you be more specific? I don't know exactly where to modify a GPO of the domain. Is it in Computers and Users or Group Policy Management.
0
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

 
PenguinNConnect With a Mentor Commented:
Did you already play with GPO's on your domain? (Group Policy Management) of any local policies in this domain?
0
 
waffeAuthor Commented:
Yes, I have messed with the GPO of the domain because new users that I created could not logon so I added Domain Users to the allowed log on. I have looked that GPO over extensively for things that would stop me from accessing the computer properties etc but everything seems fine ...

I will look there again...

I could have made other changes earlier in the semester and not remember exactly what I have done, it's all very new to me and I'm still building a frame work for it.


Thanks,
4d
0
 
PenguinNCommented:
See if you can reset your security profile with templates standard installed in windows.
0
 
waffeAuthor Commented:
Thanks you two, I did have a GPO on the main domain that I created earlier in the semester. It simply had disabled the control panel. The "gpresult" concept really pointed me in the right direction. Good tool to have.

Thanks,
4D
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.