RE: Interactive logon

From: IBTerry [MSFT] (ibterry_at_online.microsoft.com)
Date: 11/19/03

Next message: IBTerry [MSFT]: "RE: Hi Security templates"
Previous message: joshaw_at_golder.com: "Enabling Java"
In reply to: carrport: "Interactive logon"
Next in thread: MSFT: "RE: Interactive logon"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 19 Nov 2003 20:52:30 GMT

The user is not a domain admin? Correct?
If so you need to add the new user into group policy for the "allow logon
locally" user right.

IBTerry [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

Next message: IBTerry [MSFT]: "RE: Hi Security templates"
Previous message: joshaw_at_golder.com: "Enabling Java"
In reply to: carrport: "Interactive logon"
Next in thread: MSFT: "RE: Interactive logon"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

Re: Services account issue
... You really shouldn't give a service domain admin rights. ... It is almost certainly far more rights than it actually needs. ... Is it possible to create a services account so that it will use to startup ... Simply grant the account Logon as a Service and Deny logon locally using ...
(microsoft.public.win2000.active_directory)
Re: Client Access Rights
... > rights. ... >> You can use Group Policy to do such. ... >> and add the global group you want to restrict to the deny logon locally ... >> domain admin that does not want to be restricted as they always have the ...
(microsoft.public.cert.exam.mcse)
Re: Client Access Rights
... > rights. ... >> You can use Group Policy to do such. ... >> and add the global group you want to restrict to the deny logon locally ... >> domain admin that does not want to be restricted as they always have the ...
(microsoft.public.win2000.networking)
Re: Client Access Rights
... > rights. ... >> You can use Group Policy to do such. ... >> and add the global group you want to restrict to the deny logon locally ... >> domain admin that does not want to be restricted as they always have the ...
(microsoft.public.windows.server.networking)
Re: local account and AD Groups
... account to use the AD account. ... appropriate rights otherwise TWS won't link. ... service you need to be in the "logon as a service" group and therefore I ... policy but it is greyed out as it is controlled by the group policy ...
(microsoft.public.windows.server.active_directory)