Power User rights change
I've user under Power Users group, when they login to the server, they cannot see their desktop and start menu. is there anywhere to make them see it except add them to administrators group.
July 13th, 2011 10:43am
Is there known anything about server, OS version etc?
** Note that Power Users are almost Administrators because they are permitted to install software (viruses and trojans as well). Using this group is NOT recommended.
MCITP: Enterprise Administrator; MCT; Microsoft Security Trusted Advisor; CCNA
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 5:54pm
This is Windows 2008 Enterprise edition 64 Bits server.
Is there any chance to modify their access to enable them to see their desktop and start menu etc...
July 14th, 2011 4:37am
Hi ,
Thank you for your post.
If the users with Administrator rights could load their desktop and start menus, please just check/add their account rights in c:\users\<username> folder security properites.
If there are more inquiries on this issue, please feel free to let us know.Regards,
Rick Tan
Free Windows Admin Tool Kit Click here and download it now
July 14th, 2011 7:59am
Hi,
I've compare c:\users\ folder security properties, it is same as it is.Regards, Wee Yang
July 14th, 2011 10:06am
Hi,
Thank you for your updates.
I need to know more conditions to clarify your issue:
1. Is there event logs error when the Power user logon?
2. If user accounts are just in Users groups, they cannot see their desktop and start menu?
3. The issue was just encountered on this server? Any GPOs are deployed on server like folder redirection?
4. Create a new local account logon local(not domain) to verify if the issue exists
5. Reboot server in safe mode to verify if the issue exists
If there are more inquiries on this issue, please feel free to let us know.Regards,
Rick Tan
Free Windows Admin Tool Kit Click here and download it now
July 15th, 2011 7:40am
my answer as below:
1. Is there event logs error when the Power user logon?
no error when Power Users logon.
2. If user accounts are just in Users groups, they cannot see their desktop and start menu?
yes, users in Power Users group can't see their desktop, not only for 1 server. it is for all W2K8 servers
3. The issue was just encountered on this server? Any GPOs are deployed on server like folder redirection?
no, login using local profile
4. Create a new local account logon local(not domain) to verify if the issue exists
tried, it is same.
5. Reboot server in safe mode to verify if the issue exists
same resultRegards, Wee Yang
July 15th, 2011 12:48pm
Hi,
When they cannot see their desktop and start menu, they also cannot see the taskbar and cannot right click to create file?
Please run explorer.exe from the task manager on your server:
1. Press Ctrl+Alt+Delete key, select Task Manager
2. Select File menu--new task-- browse--select c:\windows\explorer.exe--click open--click ok
If there are more inquiries on this issue, please feel free to let us know.Regards,
Rick Tan
Free Windows Admin Tool Kit Click here and download it now
July 18th, 2011 8:11am
Hi Rick,
after login to server, is a black screen. Yes, taskbar also cannot see.
When i press Ctrl+Alt+Del key and execute the explorer.exe, it is access deniedRegards, Wee Yang
July 19th, 2011 9:13am
Hi,
Well, now your issue is that Users/Power users RDP server with black screen and are not able to launch explorer.exe from task manager.
To resolve your issue, please try steps below:
1. Logon server with administrator account, run
Procmon in the session.
2. Logon server with users/Power users account and try launching explorer.exe
3. Monitor Procmon to find entry access denied in result column, process name include explorer.exe and TASKMGR.EXE.
4. Give read permission to Users group in step3 found registy keys and file.
5. Test to logon server with users/Power users account
As for all your Windows 2008 servers encounter this issue, you may need to search the reason in your AD network (like server settings,Group policy, McAfee policy, etc) to prevent the issue recurrence.
Regards,
Rick Tan
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2011 6:32am
Most likely a far-fetched though, but are there any GPO's configured with AppLocker settings?
Was this deployment from an image, or installed from disc?
When you login as an administrator, what do you see for permissions on explorer.exe (c:\windows\explorer.exe)? Users should have Read and Execute on the file.A+, Net+, Sec+, MCP, MCTS, VCP4
July 26th, 2011 6:49am