Click here to get back home

Allow users to log on locally
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Allow users to log on locally Conan Kelly 04-11-2006
Posted by Conan Kelly on April 11, 2006, 5:37 pm
Please log in for more thread options
 Hello all,

Because of some network problems (which will be solved tomorrow), my boss needs
me to be able to log on to the server locally (Win
Server 2003) with limited capabilities, of course. Where exactly does he need
to go in order to give me (or a group I'm in)
permissions/rights to allow me to log on?

Also, if it is a matter of changing policies, do those changes take effect
immediately or is it every 15 mins? If it is every 15,
isn't there a command that can be issued in order for the changes to take effect
immediately?

Thanks for any help anyone can provide,

Conan Kelly



Posted by Nathan on April 11, 2006, 6:20 pm
Please log in for more thread options
 If you are talking about your domain controller, the user would need to be a
member of the administrators group which is NOT recommended
"Conan Kelly" <CTBarbarin at msn dot com> wrote in message
> Hello all,
>
> Because of some network problems (which will be solved tomorrow), my boss
> needs me to be able to log on to the server locally (Win Server 2003) with
> limited capabilities, of course. Where exactly does he need to go in
> order to give me (or a group I'm in) permissions/rights to allow me to log
> on?
>
> Also, if it is a matter of changing policies, do those changes take effect
> immediately or is it every 15 mins? If it is every 15, isn't there a
> command that can be issued in order for the changes to take effect
> immediately?
>
> Thanks for any help anyone can provide,
>
> Conan Kelly
>



Posted by Conan Kelly on April 11, 2006, 6:45 pm
Please log in for more thread options
Nathan,

Thanks for your help.

Yeah, it is probably a DC.

Only members of Admin groups can log on to DC's?

Thanks again,

Conan



> If you are talking about your domain controller, the user would need to be a
member of the administrators group which is NOT
> recommended
> "Conan Kelly" <CTBarbarin at msn dot com> wrote in message
>> Hello all,
>>
>> Because of some network problems (which will be solved tomorrow), my boss
needs me to be able to log on to the server locally
>> (Win Server 2003) with limited capabilities, of course. Where exactly does
he need to go in order to give me (or a group I'm in)
>> permissions/rights to allow me to log on?
>>
>> Also, if it is a matter of changing policies, do those changes take effect
immediately or is it every 15 mins? If it is every
>> 15, isn't there a command that can be issued in order for the changes to take
effect immediately?
>>
>> Thanks for any help anyone can provide,
>>
>> Conan Kelly
>>
>
>



Posted by Steven L Umbach on April 11, 2006, 7:00 pm
Please log in for more thread options
If it is a domain controller [sounds like it is] a domain administrator
would need to modify the user right for logon locally via Domain Controller
Security Policy to include users/groups that they want to be able to do
such. If it is a non domain controller a local administrator would have to
do the same in Local Security Policy or the domain level policy then
enforces that user right. Also keep in mind that entries in deny logon
locally will override entries in logon locally. Depending on if a domain
controller or not the propagation time for a policy change can be from
around 5 to 90 minutes assuming good an normal network
connectivity/configuration. You can speed it up by using gpupdate first on
the domain controller and then the member domain computer or just running
gpupdate on a non domain computer. You can run rsop.msc on the computer to
see the current Group Policy settings and the GPO that is applying it. ---
Steve


"Conan Kelly" <CTBarbarin at msn dot com> wrote in message
> Hello all,
>
> Because of some network problems (which will be solved tomorrow), my boss
> needs me to be able to log on to the server locally (Win Server 2003) with
> limited capabilities, of course. Where exactly does he need to go in
> order to give me (or a group I'm in) permissions/rights to allow me to log
> on?
>
> Also, if it is a matter of changing policies, do those changes take effect
> immediately or is it every 15 mins? If it is every 15, isn't there a
> command that can be issued in order for the changes to take effect
> immediately?
>
> Thanks for any help anyone can provide,
>
> Conan Kelly
>



Similar ThreadsPosted
Trust for a (locally-issued) Certificate Authority November 1, 2006, 3:09 pm
windows 2003 user login failed locally October 16, 2005, 1:50 pm
Allow power users to "Show Processes From All Users" in Task Manager May 25, 2007, 6:38 pm
Can I delete 'Athenticated Users' group form local 'Users' group January 29, 2008, 11:52 am
S-x-x-xx Users November 19, 2005, 11:36 am
Cannot Add Users November 1, 2007, 9:00 am
Hidden Users November 25, 2005, 8:26 am
Everyone vs Authenticated Users April 10, 2006, 4:09 pm
Monitoring users April 18, 2006, 12:55 pm
getting users to logoff January 14, 2008, 11:47 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap