Domain User Access Rights

CatholicTV
CatholicTV used Ask the Experts™
on
I have a generic standard user account that needs to be able to shutdown and restart domain joined servers. Since doing some Microsoft patching the user can no longer perform these functions. I read that adding the user to any of these groups would accomplish the task: Server Operators, Print Operators, or Backup Operators. That is just not the case anymore. Adding the user to any of those groups did not give them shut down and restart capabilities.

Any thoughts on how to accomplish this? Should I modify the Server Operator group to be able to do this?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Distinguished Expert 2018

Commented:
"shut down the system" is a privilege not held by the user. Adjust that.

Author

Commented:
how do you adjust that?
Distinguished Expert 2018

Commented:
Open secpol.msc, look for"user right assignment".
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

I ended up adding the domain user in question to the Backup Operators groups locally. Rebooted and it worked.
Distinguished Expert 2018

Commented:
CatholicTV, my solution works. next time please tell me where you are stuck at, so I can help you instead of closing :)

Author

Commented:
The solutions suggested did not work for what I was trying to accomplish. I figured out on my own what needed to be done.
Distinguished Expert 2018

Commented:
Please be aware that this solution works as we use it ourselves. To become effective, the user would need to logoff and on again - maybe you missed that? But never mind.

Author

Commented:
Using your suggestion on the server in question I had no option to modify the local security settings because this server is on a domain. Also the appropriate user group was already added. The add user or group or remove option was greyed out.

User not only logged out they also rebooted and no change.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial