Re: Authentication with pcAnywhere.

From: Mike Klick (mike_at_grayce.net)
Date: 01/16/04 

Date: Thu, 15 Jan 2004 22:27:55 -0600

Paul:

I understand your concern and even thought I would get comments like yours.
There is a reason. I will try to change the reason later.

But I certainly don't want them to have admin rights!

Thanks,

Mike

"Paul Adare" <padare@newsguy.com> wrote in message
news:MPG.1a70cb2b9da848089897d4@msnews.microsoft.com...
> In article <eBjUAe62DHA.556@TK2MSFTNGP11.phx.gbl>, in the
> microsoft.public.win2000.security news group, Mike Klick
> <mike@grayce.net> says...
>
> > pcAnywhere is on a Win2k server. It is a Domain Controller with Active
> > Directory. I have set it up so Domain Users are allowed in pcAnywhere.
> >
> > The problem is only Administrators will authenticate. Users will not.
What
> > do I need to do, or what special permissions do I need to give those
Domain
> > Users so they will authenticate? I do not want to make these users
> > administrators.
> >
>
> By default, normal users do not have the logon locally user right for
> domain controllers. This can be set in the Default Domain Controllers
> Policy.
>
> HOWEVER, why in the world would you be giving domain controller access
> to normal users? By doing so, you are opening yourself up to all kinds
> of problems. There are very good reasons why normal users are not
> allowed to log on locally to domain controllers.
>
> --
> Paul Adare
> Moral indignation is jealousy with a halo.
> H. G. Wells, The Wife of Sir Isaac Harman

Relevant Pages

  • Re: Authentication with pcAnywhere.
    ... > The problem is only Administrators will authenticate. ... normal users do not have the logon locally user right for ... This can be set in the Default Domain Controllers ...
    (microsoft.public.win2000.security)
  • Re: Single user with Domain Auth Issue
    ... backup terms was indeed for that reason, ... Windows 2003 Domain authentication doesn't work the same way as Windows ... Be careful using the terms Primary and Backup Domain Controllers, ...
    (microsoft.public.windows.server.setup)
  • Re: DC/site placement question
    ... If they are well connected then I can't see a good reason to get them to prefer one DC over another. ... manageablitly over directing those subnets to use the specific DC. ... The Furthest of these buildings is approximately 20 miles away. ... > are planning on placing 4 additional domain controllers at 4 different ...
    (microsoft.public.windows.server.active_directory)
  • Re: UF_PASSWD_NOTREQD Flag Set in DCs userAccountControl
    ... I would set up a lab environment and play with this before doing so in a ... You do have six Domain Controllers (I am going to ... I just inherited this domain and see no reason not to set the ... UF_PASSWD_NOTREQD flag? ...
    (microsoft.public.windows.server.active_directory)
  • Re: 2000 AD to 2003 AD
    ... WIN2000 Domain Controllers. ... going to WIN2003 Forest level would be the only reason. ... >I have a question concerning upgrading to Win2K3 environment. ... > mix one of which is an exchange 2003 server on a win2K3 box. ...
    (microsoft.public.windows.server.active_directory)
Quantcast