What is the lest privilege needed to log on to a Windows Server 2008?

Posted on 2009-12-28
Last Modified: 2012-05-08
I am studying for a microsoft certification - focusing on Windows Server 2008. In the course litterature one is supposed to log on to the server from time to time as a regular user - to test several different things. This is supposed to be possible if the user account is added to the "print operator" group (as a least privilege needed, to log on to the server).

But I am not able to log in to the server, being a member of the "print operators", and "domain users" - I just get the message that the logon failed with these credentials. Is there some other group which I should use instead?

(I know this is not best practice in a real production environment.)
Question by:andre_st
    LVL 17

    Expert Comment

    by:Premkumar Yogeswaran
    Is it is a member server or Domain controller?
    LVL 17

    Accepted Solution

    You can login to member server with least privilage ig you are having Domain Users

    But to login to DC check the link below

    Author Comment

    It is a domain controller.

    I am at work now, so I couldnt test this on the computers I am using for my studying. but I tested it on the domain controller here at work, and I got no problems logging on to the server, once I was a member of the "print operators". Although the potential problem of logging in with terminal services was not an issue in my case - I also tested it. After modifying the group policy, I also could log in remotely.

    I have to test this again at home, as I was allready member of the print operators, and I only tried to log in locally. Perhaps it is a setting in the domain controller Group Policy object. I´ll get back to you on that one.
    LVL 59

    Assisted Solution

    by:Darius Ghassem
    You have to add the group of users you want to logon with to the Domain controller group policy but you need to be careful on who you add to your DC.

    Featured Post

    Free book by J.Peter Bruzzese, Microsoft MVP

    Are you using Office 365? Trying to set up email signatures but you’re struggling with transport rules and connectors? Let renowned Microsoft MVP J.Peter Bruzzese show you how in this exclusive e-book on Office 365 email signatures. Better yet, it’s free!

    Join & Write a Comment

    With the higher take up rate of SAN’s, virtualisation etc, windows devices with more than one network interface are becoming more common.  As a general rule when a service that is installed on a Windows operating system is running, it only listens o…
    You might have come across a situation when you have Exchange 2013 server in two different sites (Production and DR). After adding the Database copy in ECP console it displays Database copy status unknown for the DR exchange server. Issue is strange…
    To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now