Solved

Need to let user logon locally to a server

Posted on 2004-09-01
5
249 Views
Last Modified: 2013-11-21
Do I need to set default domain policy too. Local has him OK to log in but doesn't work.
0
Comment
Question by:zenportafino
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
5 Comments
 
LVL 6

Expert Comment

by:JRaster
ID: 11958633
Is this person loging on the computer phyically, or using remote desktop/terminal services or what?
0
 
LVL 1

Expert Comment

by:russ_givens
ID: 11958881
I you go to gpedit.msc > local computer policy > computer configuration > windows settings > security settings > local policies > user rights assignment > check log on locally and deny logon locally.  I presume if you don't have a gpo for a site\domain\ou that is denying the person the ability to log on locally you could set this configuration on the server in question, which would provide the user the ability to log on locally to just that server.
0
 
LVL 1

Author Comment

by:zenportafino
ID: 11959397
Russ, if I check both allow and deny won't the deny supercede the allow?

JRaster - We're using remote desktop.  I go through this everytime we have someone work on our web server.  I don't like giving them local admin rights and no other groups can write to the registry.  I want to allow them to log on locally, give them full permissions only to the volume that the web site and read only for everything else.  What to do??
0
 

Accepted Solution

by:
infinitydsm earned 300 total points
ID: 11961687
Hello,

Right what you need to do is open the "Domain Controller Policy" in administrative tool in the control panel. in there if you goto local policies > security setting - there is the option "Log on Locally" you need to add the users which want to log on to the domain controller / server.

Hope this help's

Thanks
0
 
LVL 1

Expert Comment

by:russ_givens
ID: 11966253
If the user only needs to log on locally to one machine I wouldn't give the use log on locally in the domain controller gpo.  Just give him the log on locally right for the local machine policy.  If there isn't any deny's anywhere else including the domain I think it would work.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
hsrp tracking 2 64
How to map a network share in Windows Recovery Environment? 2 52
192.168... network can't ping 18 35
Wannacry 44 103
Join Greg Farro and Ethan Banks from Packet Pushers (http://packetpushers.net/podcast/podcasts/pq-show-93-smart-network-monitoring-paessler-sponsored/) and Greg Ross from Paessler (https://www.paessler.com/prtg) for a discussion about smart network …
When it comes to security, there are always trade-offs between security and convenience/ease of administration. This article examines some of the main pros and cons of using key authentication vs password authentication for hosting an SFTP server.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question