User Rights Assignment

From: David Jones (kk7gw_at_yahoo.com)
Date: 08/08/03 

Date: Thu, 7 Aug 2003 23:55:19 -0700

The grayed out rights are being applied from a domain
security policy - your domain/IT administrators need to
change this from their end.
 
>-----Original Message-----
>In the User Rights Assignment subsection of the
>Administrative Tools/Local Security Policy, three
>selections have a much different icon than all of the
>others and the controls/settings within each of these is
>grayed out, even when I log in under the original
>Adminstrator account:
>
>Act as part of the operating system
>Log on as a service
>Log on locally
>
>I have 3 profiles on this machine, the Admin (with admin
>privileges), a profile attached to my domain at work
>(also with admin privileges), and a local profile I use
>personally at home (with power user privileges).
>Recently, when my IT guy at work upgraded our domain
>controllers to Server 2003, it seems to have pushed out
a
>policy that disabled my ability to log on locally with
my
>personal profile (I get "The local policy of this system
>does not permit you to logon interactively"). I want to
>update/re-add/fix, the log on locally user rights, but
as
>I said, this function as well as the other two are
grayed
>out - even when I log on as the Administrator.
>
>
>.
>

Relevant Pages

  • Re: Logging IP address when Administrator logs in
    ... If you enable auditing of account logons in Domain Controller Security policy it will ... computers it will record a logon event in the security log of the computer that the ... administrators account on domain computers they need to manage. ...
    (microsoft.public.win2000.security)
  • RE: Re-installed XP Pro - admin accounts now blocked
    ... I would start by checking group policy to make sure the administrators ... User Rights Assignments. ... <10 days ago I performed a repair installation of XP Pro after upgrading ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: WMI remote Access denied
    ... security policy settings. ... Tools> Local Security Policy applet: ... \ASPNET, Administrators, SERVICE ...
    (microsoft.public.windowsxp.wmi)
  • Re: Cannot set default printer
    ... Elevating user rights can actually make the problem worse, ... Microsoft MVP - Terminal Server ... Adding users to the administrators group is not the answer. ...
    (microsoft.public.windows.terminal_services)
  • Re: Allow ONLY Domain Admin to login to XP
    ... Again the only way you can do that is by modifying the user rights for logon ... administrators then only users/groups in the local administrators group on ... --- Steve ... I just want domain users to be prevented from logging into a certain XP ...
    (microsoft.public.windowsxp.security_admin)