User Access to a DC


H

Harrison Midkiff

Hello:

I have something which has me puzzled. I have a user account which can
access one of my DC's. The user account is not a member of the Domain
Admins group and I have looked through the Domain Controller Security Policy
and can't figure out how he can login to a DC?

Any suggestions...

Harrison
 
Ad

Advertisements

M

Meinolf Weber [MVP-DS]

Hello Harrison,

Check the policies at the domain controllers OU for:
Computer configuration, windows settings, security settings, local policies,
user rights assignment, "logon locally"

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
 
M

Meinolf Weber [MVP-DS]

Hello Giorgos,

Sorry, but on a DC local accounts are not existing.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
 
H

Harrison Midkiff

Thanks for replying....

I checked the DC GPO policy and nothing unusual. Still a mystery....

Harrison
 
Ad

Advertisements

D

Dhruv raj

this is possible if this the first dc in your domain and the user account
exhisted
in the DC even before this dc was promoted To DC
as during dcpromo of the first dc the SAM account database in merged into
the NTDS.dit
the second possibility is
you might have the user listed in "allow logon locally " in the local
security policy
of the dc OR the default domain controlelr security policy
 
Ad

Advertisements

D

Dhruv raj

this is possible if this the first dc in your domain and the user account
exhisted
in the DC even before this dc was promoted To DC
as during dcpromo of the first dc the SAM account database in merged into
the NTDS.dit
the second possibility is
you might have the user listed in "allow logon locally " in the local
security policy
of the dc OR the default domain controlelr security policy
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top