We help IT Professionals succeed at work.

how do I remove user permissions?

end-user
end-user asked
on
167 Views
Last Modified: 2010-04-13
Recently, I started a service using a user account.  I was told that user account was granted "Log on as a service" privileges (naturally).  So, after changing it back, now I want to remove those permissions.  I'm using Active Directory.  How do I do that?

TIA
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2007

Commented:
Start/run/secpol.msc /a
Navigate to Local Policies/User Rights Assignments
Log on as a service is in the right-pane...double click it to remove the account.

Author

Commented:
Well, I got that far, which is why I'm posting here.  What I get when I double click the policy is a window listing who its assigned to, local setting and effective setting. Listed are two users and one group (to which one of the users belongs).  *None of the local policy setting boxes are checked*  So how do I remove a user from this list?  There's an option to add, but not remove.

Author

Commented:
Nevermind, I found the solution.  I was editing the local security settings, this permission was being set by the domain controller security policy.

I can remove it by going to security settings: local policies: user rights.  If I pull it up, I then have an option of removing it.

I found it in the dompol.msc, not in secpol.msc.
Unlock this solution and get a sample of our free trial.
(No credit card required)
UNLOCK SOLUTION
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a sample view!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.