Strange login problem on Windows 2003 domain

[poppachocks]

I found out by accident that we have a number of our Windows XP Pro machines on our domain that a regular user can log in right over top of an existing user without administrator privileges on the domain or the local machine. At first I thought it might be because one of the laptops was formatted fat32 rather than NTFS, but since then I have found a couple that exhibited the same behavior that were NTFS.

On these machines in question, if the existing user has locked their machine, we can come along with a regular user account and log them off and us on user that regular user account.

Has anybody seen this before, and know how to fix it??

[cluberti]

Are you sure these user accounts do not have administrative rights on the machines you are able to log in this way on, or have some admin rights in the domain? The filesystem should have nothing to do with it, this is strictly a user rights issue.

Consider following this article to run against a user that doesn't have this rights problem, and again when you log in with a user that does seem to have this rights problem (and if you can run this after logging on over another user, that would be even better).