Local Policies on DCs

From: Bill (anonymous_at_discussions.microsoft.com)
Date: 10/15/03 

Date: Wed, 15 Oct 2003 11:51:52 -0700

I have a domain controller that I need to allow log on a
service access to. I just want to give this access to one
user and just on this domain controller. I give the user
access in the Local Policy, but the user still cannot log
in as a service. If I look at the properties of 'Log On
As Service' in the Local Policy, the user has a check next
to Local Policy, but not next to Effective Policy. How do
I apply the Local Policy to the Domain Controller?

If I give the user rights at the Domain Controller
Security Policy level, it works. But then I gave the user
Logon As Service rights to all the domain controllers. I
don't want to do that.

Any help is appreciated.
Thanks.
Bill

Relevant Pages

  • Re: Local policy of this system does not permit you to logon interacti
    ... Domain Controller Security Policy ... Got an error “The local policy of this system does not permit you to logon ... What else I need to change to login thru remote desktop? ...
    (microsoft.public.windows.server.general)
  • Re: Remote Desktop Connection installation
    ... target=_self name="The local policy of this system does not permit you to logon interactively.">"The local policy of this system does not permit you to logon ... because the W2K domain controller running Terminal Services does not have the Users, Authenticated Users, or Everyone global group added to the Group Policy Object for the "Log on Locally" user right. ... "Log on Locally" is a required user right in Microsoft Windows NT 4.0, Terminal Server Edition and Windows 2000 ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: how to restore GP in recovery model on 2k3
    ... Restart the computer in safe mode or Directory Service Restore Mode if this ... is a domain controller and edit the local policy. ...
    (microsoft.public.windows.group_policy)
  • Re: 2003 Server Login Problem
    ... If this is a Domain Controller, enable the local logon right in the Domain ... > I have a problem logging onto the console of a Windows ... > that the local policy allows log on locally. ...
    (microsoft.public.windows.server.general)
  • Re: Auditing User logon/logoff events.
    ... u say in the document like i enabled "Account logon events" only in domain ... Then i am getting 672,673 event ids in my domain controllers event viewer. ... can see this log in domain controller security log. ...
    (microsoft.public.win2000.security)