Re: Group permissions

"NINA" <NINA@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:884E9887-28C2-4C4E-8C58-A23001D070CF@xxxxxxxxxxxxxxxx
I have created a local admin group(testgroup) and assigned a particular
user
(testuser)to that group and then assigned that group(testgroup) to the
following local policies:

act as part of the operating system
log on as a service
log on locally

I am not able to perform a particular function. If I assign the testuser
explicitly to those same local policies I can. The customer has a GPO
that
does not allow individual users the ability to be assigned local policies.

I am aware of no way to do this in a GPO except one that will control
both groups and accounts added via local policy, not just groups or
user accounts.

Is there anyway around this?

Please verify and explain what this limitation is ? since it seems to
be this that is getting in your way, but it cannot be a restriction of the
form you have stated.

Roger


.

Relevant Pages

  • Re: Login Script
    ... file is stored in the folder ... You are working with local policies, so all things you manipulate are ... remove auth.Users from the GPO and add: ... by Security Group, or use ifmember.exe inside your batch. ...
    (microsoft.public.windows.group_policy)
  • Re: Group permissions
    ... test system, and what settings they carry for these user rights, if ... then they are not under control by AD GPO. ... due to whether the changed local policy had or had not yet been ... explicitly to those same local policies I can. ...
    (microsoft.public.win2000.security)
  • Re: Windows 2003 Server IP address
    ... the server is not in a domain.. ... > any local policies in effect? ... This sounds like a GPO going into effect. ... Prev by Date: ...
    (microsoft.public.windows.server.general)