Question : Your account is configured to prevent you from using this computer.  Please try another computer.

We have a very small domain containing three Windows XP SP1 workstations and one Windows 2003 server.  We are using the Default Domain Controller security policy as our group policy on the domain.  Today we made a few small modifications to the group policy (namely changing the Windows XP desktop to the classic style, making logoff scripts invisible, etc.) and now two out of the three workstations give the following error message when a standard domain user logs in:  “Your account is configured to prevent you from using this computer.  Please try another computer”  Domain administrators and local administrators can login without a problem.

The third workstation continues to work without a problem.  All three appeared to have applied the changes in the policy because they now use the classic windows theme and no longer show the logoff script.  Our only workaround is to add the domain users to the local administrators group on each PC.  Obviously, this is bad practice and is not necessary.

Why one PC is working fine and the other two are giving us this error?  Now we have tried to change the group policy again (just to ensure that it is working properly by making the logoff script invisible again) and we are not seeing the changes propagate down.  We have tried to run gupdate /force from both the DC and all three of the workstations.

Any help in allowing standard domain users to logon to the two workstations would be appreciated.

Thanks!

Answer : Your account is configured to prevent you from using this computer.  Please try another computer.

Closed, 400 points refunded.
RomMod
Community Support Moderator