Interactive Logons

[Tomasga]

When I create any user in my active directory console I am not able to use
the user to logon to any machine in the network. What I have had to do in
the past is go into the user accounts console of that local machine and then
manually add the user to that machine. But since some users sometimes need
to use other computers in the offive this becomes a pain for me. Any
suggestions on what I can do to change this globally for the domain so that
all users can logon to all machines unless I specifically state that they
should not.


thanks,

Tomas Garica

 

[Yor Suiris]

Use Group Membership. On the Local Machines give a Domain Group the right to
logon. Then when you create a new user add them to this Domain Group and
then there is no need to visit each machine when you have a new user.

 

[Tomasga]

I would have to create this domain group on each local machine first?

 

[Yor Suiris]

No, create the Group in your AD (or use one already there). Then add that
Group to the Local machine's Power Users or Users Group depending on your
needs & O/S.

 

[Tomasga]

Thanks for you help.

No, create the Group in your AD (or use one already there). Then add that
Group to the Local machine's Power Users or Users Group depending on your
needs & O/S.