Solved

how do I remove user permissions?

Posted on 2004-03-31
5
145 Views
Last Modified: 2010-04-13
Recently, I started a service using a user account.  I was told that user account was granted "Log on as a service" privileges (naturally).  So, after changing it back, now I want to remove those permissions.  I'm using Active Directory.  How do I do that?

TIA
0
Comment
Question by:end-user
  • 2
5 Comments
 
LVL 67

Expert Comment

by:sirbounty
ID: 10729194
Start/run/secpol.msc /a
Navigate to Local Policies/User Rights Assignments
Log on as a service is in the right-pane...double click it to remove the account.
0
 

Author Comment

by:end-user
ID: 10733122
Well, I got that far, which is why I'm posting here.  What I get when I double click the policy is a window listing who its assigned to, local setting and effective setting. Listed are two users and one group (to which one of the users belongs).  *None of the local policy setting boxes are checked*  So how do I remove a user from this list?  There's an option to add, but not remove.
0
 

Author Comment

by:end-user
ID: 10733227
Nevermind, I found the solution.  I was editing the local security settings, this permission was being set by the domain controller security policy.

I can remove it by going to security settings: local policies: user rights.  If I pull it up, I then have an option of removing it.

I found it in the dompol.msc, not in secpol.msc.
0
 
LVL 1

Accepted Solution

by:
Computer101 earned 0 total points
ID: 11518532
PAQed, with points refunded (25)

Computer101
E-E Admin
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
NT Print server: Should be able to print? 1 619
Windows WEb Server sp2 13 523
schedule script execution in windows 2000 3 142
Building AD from Scratch 5 142
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Direct mail marketing is the act of mailing materials straight to prospective customers. This wide form of marketing is one of the oldest methods of communicating with a geographic based demographic. So is it useful in 2017 and beyond?
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question