asked on

Logon locally to a DC

I'm novice to Win2000 Server. In a small office environment with 4 computers the DC should be used as a workstation because ist's the most powerful machine on the site. How do I give a user the permission to log on locally to that machine without making him/her an administrator?
Thanks

jhance

Open the USER MANAGER (Go into the Control Panel>Administrative Tools>SECURITY POLICY and select Local Policies>User Rights Assignment. Choose the LOG ON LOCALLY policy and ADD whatever users you want to permit to logon locally.

defore

is this running active directory?

mikecr

If this is a domain controller you will need to set these rights in AD directory. Do you know whether it is a domain controller or not?

uelitribelhorn

ASKER

To clarify: It's a DC and AD is running.

mikecr

In AD, right click on the domain and choose properties. Next click on the Group Policy tab. Click Edit in the buttons below Default Domain Policy to edit it. Next, go to Computer Configuration, Windows Settings,Security Settings, Local Policy, User Rights Assignment and right click on Log on locally in the right pane and choose security. Next, put a check in the box that says Define these policy settings and then the Add tab will become highlighted. Choose add and then click browse and browse for the users or groups that you would like to add to log on locally. Click Ok and Ok to back out and then close AD. Give it a few minutes to take effect and you'll be set.

uelitribelhorn

ASKER

Mikecr
Thanks for your advice, I found these settings in Programs, Administrative Tools, Policies for Domain Controllers. Is this what you called 'In AD'? I don't see a management tool just called AD (maybe because the DC is the only one?).

ASKER CERTIFIED SOLUTION

mikecr

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

uelitribelhorn

ASKER

Mikecr:
It works fine, thanks.

mikecr

Glad I could help. Thanks and good luck!