How to grant local policy rights on server joined to domain ?

M

Marlon Brown

On Windows 2000, I need to grant permissions to a domain user account "run
as a service". I need that accomplished only on 5 specific servers.

If I go to Administrative Tools->Local Security Policy, I can include that
account to run as a service just fine, however the Effective Permissions
enforced by the domain override that setting.

Is there any way to grant permissions locally in that situation, or the one
way out is granting this on the OU level ? I would prefer to avoid creating
OU for those servers.
 
R

\Richard McCall [MSFT]\

This means that the user right is being defined at a higher level. It may be
easier to create an OU, Drop the machines in it and define the User rights
in group policy for those machines. Otherwise you need to find where the
user right is being defined in the policies that are applying to it
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

Rights to logon locally to certain server 2
How to grant a group rights to manage shares? 3
Domain policy vs local policy 4
Domain Security Policy vs. OU specific Policy 1
cannot login locally to 2k servers after live comm server install 3
Grant ntfs permission on domain computer to WORKGROUPComp\User 2
Local account settings on a domain member server 6
subinacl - can't grant multiple permissions? 7

Top