Hi, Im having a problem, every time i install a fresh win2kpro machine and add it to the WinNT server 4 DOMAIN, the PC locks things down for the DOMAIN ADMINISTRATOR. My thoughts are following but unsure how to go about discovering if they are the problem: 1. some group policys are stored on the NT4 PDC somewhere that get copied to the Win2KPro PC on joining the domain. 2. IEAK was once on the NT4 PDC but was removed a long time ago but was removed for doing the same issue. 3. Some settings in PolicyEditor are set up incorrectly with a .adm file that is not used any more. To get the pc running with out these restrictions takes a lot of work but now its taking too long and need to find the source of the problem. I have tried searching the MSKB but its like a jungle and cant find anything. Feedback would be great.

I would look for policies on the NT4 PDC. The restrictions aren't coming from the 2000 PC that's for sure...not if you're doing clean install's.