Domain Admin security

[Guest]

Windows 2003 AD domain.
I want IT to be able to use admin terminal service session
to administer DCs and other servers.
They are members of Account operators, Server operators
etc but not Domain Admins.
Currently get error "Local policy does not permit you to
logon interactively"
How can I get round this?

Any help appreciated.

 

[Jeff Cochran]

Windows 2003 AD domain.
I want IT to be able to use admin terminal service session
to administer DCs and other servers.
They are members of Account operators, Server operators
etc but not Domain Admins.
Currently get error "Local policy does not permit you to
logon interactively"
How can I get round this?

Give them the right to logon interactively.

It's a local policy, so it needs to be changed on the local system,
giving whatever domain account group the right, then making sure these
guys are in that group.

Jeff

 

[Guest]

This worked. Thanks.

-----Original Message-----


Give them the right to logon interactively.

It's a local policy, so it needs to be changed on the local system,
giving whatever domain account group the right, then making sure these
guys are in that group.

Jeff
.