SpyderG
asked on
Allow security group to log in locally on Server 2008 DC
Hello Everyone
I have a customers network that is using EMR medical software, this software cannot be updated unless the user runs a .exe on the server itself. We need to allow this single user to be able to log in at the console and run this file when ever she needs.
We know the risks associated with allowing users to log in locally on the machine, but until this software's maker revises the updating process this is the only option.
My understanding is that i should be able to create a new security group, add the user to the user group. then under the local security policy i should be able to add said security group to the "log on locally" policy.
Please see the screenshot below, the add button on this screen is greyed out with a link to a KB article, unfortunatly when i use this link it specifically says this KB does not apply to my OS, and i cannot find anywhere in the article to enable this add button.
Any idea how i can either add this security group, or another way to get this task done?
This is a Server 2008 SBS server, and we do not want this user to have administrator rights.
Thanks so much!
crap.jpg
I have a customers network that is using EMR medical software, this software cannot be updated unless the user runs a .exe on the server itself. We need to allow this single user to be able to log in at the console and run this file when ever she needs.
We know the risks associated with allowing users to log in locally on the machine, but until this software's maker revises the updating process this is the only option.
My understanding is that i should be able to create a new security group, add the user to the user group. then under the local security policy i should be able to add said security group to the "log on locally" policy.
Please see the screenshot below, the add button on this screen is greyed out with a link to a KB article, unfortunatly when i use this link it specifically says this KB does not apply to my OS, and i cannot find anywhere in the article to enable this add button.
Any idea how i can either add this security group, or another way to get this task done?
This is a Server 2008 SBS server, and we do not want this user to have administrator rights.
Thanks so much!
crap.jpg
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
So after trying a gpupdate /force and also rebooting the machine this still has not allowed local access. I haven't found a single reference online where someone was able to get this to work correctly with SBS 2008.
The local policy that is greyed out, does anyone possibly know a registry hack that may allow editing of the local policy?
We have come to the point that for now we will have the customer sign a release and give her account administrative rights. Hopefully that software is updated soon.
Thanks!
The local policy that is greyed out, does anyone possibly know a registry hack that may allow editing of the local policy?
We have come to the point that for now we will have the customer sign a release and give her account administrative rights. Hopefully that software is updated soon.
Thanks!
ASKER
Unfortunatly for server 2008 this didnt work.
ASKER