Log on Locally user right

[Fritz]

Which groups users should have the right so everything still works. I want
to assign "Log on Locally" to a domain group that I had created. Currently
the settings is undefined - I don't want to break anything when I define.

Thanks!

 

[Paul Bergson]

All this change will do is allow users to logon locally. Shouldn't affect
anything else.

 

[Fritz]

I understand that but certain groups are allowed to log on locally by
default. I need to know what those groups are so I don't lock them out when
I define the setting.

 

[Paul Bergson]

This setting is only for people who physically walk up to the machine and
logon. Unless you deny admins will always have access.

What type of a machine is this? Member server, workstation, DC?

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Fritz]

It's a backup DC that doubles as an FTP server. I created a group called
FTPUsers. FTP requires the log on locally right.
I recall running into a problem with one of the client sites in the past
because I defined the setting in the domain policy and didn't include one of
the required groups so users were unable to log on to the domain (I think it
had something to do with Terminal Services running on the server - this is
also running TS).

 

[ptwilliams]

Open the local group policy snap-in and look. The local policy settings are
defined, but the applicable (those defined higher in the pecking order)
settings show that they have been overridden.

Off the top of my head, I would say that the following are there by default:

Administrators
Backup Operators
Guest
Power Users
Users

 

[Paul Bergson]

Since it is a DC I don't think there is going to be anybody in the
definition but Admins and backup operators.

That is about it.

 

[ptwilliams]

Ah, I didn't read the whole thread (that'll teach me ;-)

Good point.

 

[Fritz]

What about "Domain Controllers"?

Since it is a DC I don't think there is going to be anybody in the
definition but Admins and backup operators.

That is about it.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Paul Bergson]

Only add what you need. Should be Domain Admins, Backup operators and who
ever else you need.

--

Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.