Local Admin Account with Deny Logon Locally
- From: sergeykuz@xxxxxxxxx
- Date: Wed, 30 Jan 2008 15:46:14 -0800 (PST)
Hi,
I am trying to create an account that would allow certain users
install software on their XP SP2 desktops. I don't want them to use
the account to logon in the morning but rather have them supply its
credentials in the Run As box when they run software or patch
installation files. I created an account and created a GPO for the
Test OU that added it to the Local Admins group, set "Deny Logon
Locally" to "Enabled" and specified the account in the "Logon as a
Service" setting. I applied the GPO and checked to make sure that the
account was now in the Local Admins group. However, when I logon
locally as a regular user and try to install an application using Run
As with the new account's credentials I get the error "Logon failure:
the user has not been granted the requested logon type at this
computer." I guess I was wrong assuming that when you use Run As, the
system does not treat it as a local logon? Is there any other setting
that I should have configured?
Thanks
.
- Prev by Date: Re: How to encrypt 2 files so can't be read
- Next by Date: Re: XP won't let me install Eset Nod32 antivirus
- Previous by thread: Re: How to encrypt 2 files so can't be read
- Next by thread: Re: XP won't let me install Eset Nod32 antivirus
- Index(es):
Relevant Pages
|
|
