Go to ADUC and compare the tabs for groups to which they belong and permissions, compare them to a working user. Maybe there is something extra or missing on those 2 users.
HTH
java
If this helps, please rate
www.cisco.com/go/pdihelpdesk
HTH
java
if this helps, please rate