Announcement

Collapse
No announcement yet.

Security group AD 2003

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Security group AD 2003

    Hi all

    I need to create a security group on AD that has all the domain admin access EXCEPT that this group must no log on to servers. Domain Powers users canot do all the functions that we require.

    Any advised would be apreciated

    Thanks
    Rallo

  • #2
    Re: Security group AD 2003

    Make a Domain Local group which is a member of the "Domain Admins" group and using a GPO specifically deny the "Log on locally" right to that group for servers.


    Tom
    For my own and your protection, I do not provide support by private message under any circumstances. All such messages will be deleted and ignored.

    Anything you say will be misquoted and used against you

    Comment


    • #3
      Re: Security group AD 2003

      I tried it even added a speciic user into the deny locally and through terminal services and the system still logs him in . I even changed the default domain policy and it still logged him on

      Comment

      Working...
      X