RE: Local security getting overwritten



Hi Scott,

Thanks for your feedback!

In this scenario, the Domain Policy conflicts with your server application
account requirement. So I think the suitable solution is notifying your
domain admin to change the domain policy, which allows your server
application running account to have 'Log on as batch job' right.

Writing a configuration tool to change the domain policy is not the best
solution in current situation. This is because changing the Domain Policy
requires Domain Admin right. If you have Domain Admin right, it is simpler
to use your domain admin right to run Group Policy Object Editor tool to
change that domain policy than writing another tool.

So, I think you'd better contact the domain admin (or you can do it
yourself, if you have domain admin right) to change the domain policy, this
is the simplest solution.

If I misunderstand your concern, please feel free to tell me, thanks!

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


.



Relevant Pages

  • RE: Local security getting overwritten
    ... I am the Domain Admin on our production and test networks. ... I don't want the installation of our application to be a trial for our ... the Domain Policy conflicts with your server application ... Writing a configuration tool to change the domain policy is not the best ...
    (microsoft.public.platformsdk.security)
  • Re: Group Policy not applying over Network to XP users
    ... >> I've modified the screen saver policies in the Default Domain Policy. ... >> these Domain admin accounts. ... I tried the second domain admin account but the policy had not ... >> roaming profile configured. ...
    (microsoft.public.win2000.active_directory)
  • Re: Restricted Groups in OU
    ... The Default Domain Policy was "enforced". ... set it to not "enforce", then the OU policy did take effect. ... > The OU policies do supersede the domain policies. ... >> group as well as the Domain Admin. ...
    (microsoft.public.windows.group_policy)
  • Re: I implimented a group policy and it priventing me from getting to the MMC
    ... If you configured this on the "Default Domain Policy" you could rename the ... the next time the users log on. ... the Adminpak and right-click AD Users and Computers and specify domain Admin ... > remove the GPO from the domain controler so that I can fix ...
    (microsoft.public.windows.group_policy)
  • Re: My users have disappeared!
    ... Using a brand new OEM install of Windows Server 2008 Std SP1. ... containers, one for each office. ... When I came out of Default Domain Policy, ... I can't figure out how to UN apply that filter, ...
    (microsoft.public.windows.server.active_directory)