I have an admin in a child domain that cannot log into a DC/GC locally. There aren't any denies on any other group he is a member of and another domain admin can log on locally.
Any ideas? I have searched premier.microsoft.com and goooooogled. If I have missed something obvious, excuseme, I am a little ill.. :-) List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/