Re: Disable the right to logon locally

From: Matt Hickman (hemo_jr_at_space.com)
Date: 05/22/04 

Date: 21 May 2004 22:25:34 -0700

dbwmn2001@yahoo.com (Dave Bowman) wrote in message news:<47e33e2c.0405200742.a3e4a24@posting.google.com>...
> The question is the following: if I enable the policy in the Default
> Domain Security Settings/Local Policies/User rights assignment/Deny
> Logon locally and I add this user, does this change override
> completely the machine policies?

Since you are not granting the logon locally right to anyone,
this should not override any denies of that right set-up locally.

> I ask this because I notice that an XP workstation has a local setting
> which denies logon to support* Users, ASPNET etc. so I'm wondering if
> I have to add these users to the domain policy as well

No, you don't 

-- 
Matt Hickman   
  Given time and plenty of paper, a philosopher can prove anything.
                              Robert A. Heinlein (1907 -1988)
                             _Double Star_ (c. 1956)