Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Creating accounts for service logon only?

Posted on 2003-10-21
4
Medium Priority
?
256 Views
Last Modified: 2010-04-14

How exactly do I allow an account to only logon as a service thereby preventing anybody logging on with that account on a workstation/server?  (for Active Directory - DC's running SP4).

thanks.
0
Comment
Question by:allangray
2 Comments
 
LVL 51

Accepted Solution

by:
Netman66 earned 750 total points
ID: 9591822
Setup a user account - add it to the local Administrator group and remove it from the Domain User group.  Create a complex password and record it.  Lock that in your HR's vault.

Using Group Policy, set the security option for "log on as a service" by adding that user.

In the user's properties, set the option to only be able to log into the server.

Hope that helps.

0
 

Expert Comment

by:adamday
ID: 9592325
Create an standard account, make it an administrator. If you change the domain controller security policy or domain security policy and set the access rights to allow the logon as a service and not logon as interactive. This will prevent the user login on but permit use as a service.
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an anti-spam), the admin…
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …

876 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question