Domain account vs Local account on Vista
Windows Vista Forum
Home      Members   Calendar   Who's On
Welcome Guest ( Login | Register )
      



Domain account vs Local account on VistaExpand / Collapse
Author
Message
Posted 10/12/2009 1:42:12 PM
 

Group: Forum Members
Last Login: 10/23/2009 1:54:48 PM
Posts: 2, Visits: 7
Hi,

We are creating a PDF file in login user's local application folder (C:\Users\%username%\AppData\Local\folder1) through a custom .Net application and displaying the created pdf file in application.

The above functionality is working for users who are part of domain and added to local vista machine as users (both for administrator and standard user accounts).

The same is not working for local users (both administrator and standard user accounts created in vista box).

File is getting created for any user under their local appdata folder and can able to open from that location, but not displaying from app in case of local system users (admin or standard type).

Can anyone help me what security settings differ between domain users vs local users in vista business 32 bit OS?

Thanks
Padmaja

Post #239499
Posted 10/23/2009 2:02:26 PM
 

Group: Forum Members
Last Login: 10/23/2009 1:54:48 PM
Posts: 2, Visits: 7
Policy that is actually causing the problem (or lack thereof) is corresponds to Internet Options control panel, Connections tab, Lan Settings button: Use Automatic Configuration settings.

Having this turned on causes IE to load a configuration file prepared by IT department which makes a whole lot of configuration changes to IE, including remapping the security zones. We can test this by unchecking this option (the default state).

Since the machine is in domain and since we are testing with domain users accounts, I have monitored domain controller pushing down a bunch of policy settings which relax the IE security settings, causing the reports to display.

First, domain settings will resync over time and this checkbox will keep getting turned back on automatically. So you can’t really turn this off, it won’t stay off. I would feel better just testing local accounts, but since the computer is also a member of the domain, machine-specific policies are applied by the domain as well.

Post #242641
Posted 10/23/2009 3:27:09 PM


Lead Forum Moderator

Lead Forum Moderator

Group: Vista Forum Moderator
Last Login: 2 days ago @ 9:35:19 PM
Posts: 2,683, Visits: 2,837
What you just reported is why we don't get involved in domain-related stuff.

There's just too much that can originate from the domain controller side, and when you combine that with group policy settings, there's more than we can handle from this end.

Sorry, but we have our hands full just trying to keep consumers on home PCs up and running. We can't take on members of domain accounts as well.


ASUS A832nSLI-Deluxe, AMD 64X2 4400 OC 2.4GHz, 2GB OCZ,
Running: Windows 7, Vista 32-bit, Ubuntu 9.04

Post #242662
« Prev Topic | Next Topic »


Reading This TopicExpand / Collapse
Active Users: 0 (0 guests, 0 members, 0 anonymous members)
No members currently viewing this topic.
Forum Moderators: Jason, blackhat, kingofnexus, Camride, MafiaLord91, WAW8, Walker, MrMagic, PC509, AmericanNightmare

PermissionsExpand / Collapse

All times are GMT -6:00, Time now is 1:54am

Powered By InstantForum.NET v4.1.4 © 2009
Execution: 0.219. 6 queries. Compression Enabled.