5 years ago I also got this problems!!! But it seems most of the
Administrator didn't met this problem or it just a very simply problem???
Couldn't found anyone talk about this problems.

Your problem - When the Domain user did not have "local account" in the
Local Computer and use that computer(already join into Domain) to logon to
"Domain" Server. This could created some of security and files access right
in the local computer.

Is that your problems?


"XION" ?????
oups.com...
I am an administrator on an intranet. I use Windows Server 2003 to
create and manage incoming new user; also Exchange 2003 as the email
server.

Whenever I create a new user account for windows client logon and email
account, the new user will receive a message "Cannot start Microsoft
Office Outlook". To solve this problem I have only 2 options:

1. Set the new user account as Domain Administrator in Windows Server
2003
2. Set the new user account as an Administrator in the client computer

Although the problem is solved, it creates a very big security issue in
the network:

1. There are a lot of administrators in the network, Able to access to
most of the computer, may spoil network setting and configuration(can
you imagine the seriousness?)
2. With client side administrator status, the new user can install
anything into the computer.

If the new comer is a hacker, then he or she can steal company's data
easily. Prior to that, before I upgraded to Windows Server 2003, those
old users that were created by Windows NT has no such problem. I only
give them Power user status. I am looking to solve this problem for
years, there is no information found in the Internet. If you want
Microsoft to help you, per question is about USD150.00, they create
problem to earn money!

Anyone can help to solve the problem?