Deny log on locally on Windows NT 4.0 domain

[omg]

How to do in order to deny log on locally for a domain group/user in a
all Windows NT 4.0 domain machines?

Tried ntrights.exe

ntrights -u domain\user_name +r SeDenyInteractiveLogonRight

bu is not seems to work. The command returns:

***Error****AddUserRightAccount -1073741728


Thanks,

 

[omg]

omg a écrit :

How to do in order to deny log on locally for a domain group/user in a
all Windows NT 4.0 domain machines?

Tried ntrights.exe


bu is not seems to work. The command returns:

***Error****AddUserRightAccount -1073741728


Thanks,

I'm comink back with some details: I want to deny to login on the
Windows NT 4.0 domain machines (member server, workstations, domain
controllers) console using a service acount.


Thanks,

 

[Jerold Schulman]

How to do in order to deny log on locally for a domain group/user in a
all Windows NT 4.0 domain machines?

Tried ntrights.exe


bu is not seems to work. The command returns:

***Error****AddUserRightAccount -1073741728


Thanks,

Workked for me.

Try

ntrights -u "domain\user_name" +r SeDenyInteractiveLogonRight

and

ntrights -m \\ComputerName -u "domain\user_name" +r SeDenyInteractiveLogonRight

If you still have problems, download the latest version from tip
6702 » Windows Server 2003 Resource Kit Tools can be installed on Windows XP.
in the 'Tips & Tricks' at http://www.jsifaq.com





Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com