This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(76.8, 8%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EES%3C/text%3E%3C/svg%3E)
I have a new windows 10 workstation. Configured local user account with Admin privileges. Set DNS to point to AD Server. Joined Domain and rebooted. No builtin or domain specific users created on the workstation and unable to remote desktop connect to workstation after joining the domain.
I've found several GPOs that were broken and suspect that perhaps one of them controls the behavior of the workstation joining the domain. How do I determine if my Group Policy is correctly configured so that a workstation joining the domain allows users to log into the machine?
No builtin or domain specific users created on the workstation
This does not happen by default. You'll need to add the domain user to the local groups (by some means) as needed.
--please don't forget to upvote and Accept as answer if the reply is helpful--
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
This is not consistent with the behavior that I observed when joining previous workstations to the domain.
Expected behavior:
Users defined in the AD are able to log onto the workstation from the login screen
Observed behavior:
After joining the domain, no AD defined users are able to log into the workstation
Can you give me additional clarity on what you mean by "You'll need to add the domain user to the local groups (by some means) as needed"?
Thanks,
Eric
This is not a default part of active directory. Sounds more like the result of some group policy, OU container config or some scripting that another admin has done. I'd suggest closing this one by marking answer and open a new thread describing what you would like to have happen.
--please don't forget to upvote and Accept as answer if the reply is helpful--
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--