Policy Settings

[Paul]

Here is my scenerio:

I have users that have created printers on their
workstations and we want them to control the printers.
The problem is that the print operators group is part of
the domain policy setting to restart the server. So
sometimes these users shutdown the server without
realizing it. So I took them out of the print operators
group so they could not do this but when I go to add
everyone group to log on locally it will not take the
Domain effective setting.....it is grayed out and
therefore these users cannot log into the domain. I have
to put them back into the print operators group (for the
lack of putting them into a more powerful group ie
Administrators). Anyone come accross this before? Thanks

Paul

 

[Steven L Umbach]

If settings are grayed out , that probably means that policy is being
propagated down from a higher priority level. Check the settings at the
domain or oganizational unit level if Local Security Policy does not work.
Changes to user rights assingments for domain controllers are usually
configured in the Domain Controller Security Policy or in a GPO for the
domain controllers container. There is also a user rights assignment for
shut down the system which you may want to look at modifying to your needs.
Security /Group Policy is applied in this order -
local>site>domain>organizational unit. --- Steve