Go Global needs local login on windows 2003 server DC

Posted on 2009-12-18
Last Modified: 2013-11-21
Want to allow users the ability to login to a domain controller locally to facilitate Go Global Software (GG requires local login on behalf of the user).  Domain controller will not allow it.  What would I have to change to allow local login on a Windows 2003 server standard DC box? (Note - max size of the environment will be 5-6 machines total.  Server is more than capable of supporting this environment.)
Question by:kfccs2k
    LVL 14

    Accepted Solution

    You cannot create or log on locally to a DC.  You can log on to the DC as a domain user, but not as a local user.  DCs do not have a local database of user accounts.
    LVL 24

    Assisted Solution

    To allow log on locally,you have to use dsrm mode password.

    DSRM mode is directory service restore mode which is not used for working but for maintenance purpose like AD database defrag,repair,restore etc.

    Its used for maintenance purpose & AD database is in shutdown state.

    Even AD will not open into dsrm mode.

    If any of your application requires admin membership,make them domain admin,but its a big account,be aware before providing to users.

    SO,Domain controller is not a simple server & yes, in normal mode you will not see any local account.

    Featured Post

    How to run any project with ease

    Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
    - Combine task lists, docs, spreadsheets, and chat in one
    - View and edit from mobile/offline
    - Cut down on emails

    Join & Write a Comment

    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Know what services you can and cannot, should and should not combine on your server.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    18 Experts available now in Live!

    Get 1:1 Help Now