Click here to get back home

Server login help

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Server login help Bajo 12-27-2005
---> Re: Server login help Roger Abell [MV...12-27-2005
Posted by Bajo on December 27, 2005, 9:52 am
Please log in for more thread options
Hi to all,

I have Windows Server 2003 as DNS, DC and AD server set up and work fine.
How can I log on as user (restricted user) on that server(console login), so
i don't need admin rights.

Thaks to all.

Best regards.

daniel



Posted by Roger Abell [MVP] on December 27, 2005, 11:32 am
Please log in for more thread options
On domain controllers the user right to log on locally is changed
so that Users group is no longer listed (as it was when machine
was just a member or stand-alone server).
It is not advisable to allow Users group local logon to a DC.
If you do need a specific set of limited accounts to have this
ability, define a group, like LocalLogin, add the accout to the
group, and in the Default Domain Conroller group policy object
(or, preferred, in a GPO other than the default that is linked to
the DC OU with higher application order) access the User Rights
section and add the new custom group to the user right to login
in locally.

> Hi to all,
>
> I have Windows Server 2003 as DNS, DC and AD server set up and work fine.
> How can I log on as user (restricted user) on that server(console login),
> so i don't need admin rights.
>
> Thaks to all.
>
> Best regards.
>
> daniel
>



Posted by Bajo on December 28, 2005, 9:06 am
Please log in for more thread options
Thanks


> On domain controllers the user right to log on locally is changed
> so that Users group is no longer listed (as it was when machine
> was just a member or stand-alone server).
> It is not advisable to allow Users group local logon to a DC.
> If you do need a specific set of limited accounts to have this
> ability, define a group, like LocalLogin, add the accout to the
> group, and in the Default Domain Conroller group policy object
> (or, preferred, in a GPO other than the default that is linked to
> the DC OU with higher application order) access the User Rights
> section and add the new custom group to the user right to login
> in locally.
>
>> Hi to all,
>>
>> I have Windows Server 2003 as DNS, DC and AD server set up and work fine.
>> How can I log on as user (restricted user) on that server(console login),
>> so i don't need admin rights.
>>
>> Thaks to all.
>>
>> Best regards.
>>
>> daniel
>>
>
>



Similar ThreadsPosted
issue login into windows server December 28, 2005, 4:52 am
HELP: Cannot Login member server (Offline) July 24, 2007, 3:50 pm
Login Script Question - Failed Login Count, Location, and Method October 5, 2005, 6:28 pm
Smart Card Login + Certificate Login to AD -> Lost smart card December 15, 2005, 10:03 pm
login October 19, 2007, 4:46 pm
Login Auditing June 17, 2005, 11:05 am
Login Interactively June 23, 2005, 8:20 am
Login Control November 16, 2005, 9:48 pm
Login Domain November 25, 2005, 7:13 pm
login once per user March 14, 2007, 9:16 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap