Announcement

Collapse
No announcement yet.

Allow logon locally

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Allow logon locally

    Dear Jones sir,
    I am trying to apply policy for user1 allow logon locally to domain controller. I logged into the domain as an administrator. but I am trying to apply the policy I am facing this error message 'only administrator will apply this policy.'

    help me how to resolve this issue.

    Regards,
    Durgavaraprasad

  • #2
    Re: Allow logon locally

    So you are doing this in group policy? What policy are you updating? Does the policy cover the user you are trying to do it for?
    David Silvester
    Systems Administrator

    Comment


    • #3
      Re: Allow logon locally

      Dear Sir,
      I am applying allow logon locally policy for domain user.

      Regards,
      Durgavaraprasad

      Comment


      • #4
        Re: Allow logon locally

        Originally posted by durgavaraprasad View Post
        Dear Sir,
        I am applying allow logon locally policy for domain user.

        Regards,
        Durgavaraprasad
        Have you tried following this article:
        http://technet.microsoft.com/en-us/l...(v=ws.10).aspx
        ?
        David Silvester
        Systems Administrator

        Comment


        • #5
          Re: Allow logon locally

          Dear Sir,
          I applied in Default Domain Controllers Policy-Computer Configuration, Policies, Windows Settings,Security Settings, and Local Policies,-User Rights Assignment.Allow Logon Locally-Define these policy settings-and i Added the User.
          after that i click apply i am facing the error.i logged into domain controller as administrator.(windows server 2008 )

          Regards,
          Durgavaraprasad

          Comment


          • #6
            Re: Allow logon locally

            This article should provide the answer:

            http://technet.microsoft.com/en-us/l...(v=ws.10).aspx
            David Silvester
            Systems Administrator

            Comment


            • #7
              Re: Allow logon locally

              Dear Sir,
              I tried the same policy in my backup domain.it is done.


              Regards,
              Durgavaraprasad

              Comment


              • #8
                Re: Allow logon locally

                So the identical policy setting works OK in a test environment?

                Time to do some GPResults and do a detailed comparison of settings between the domains
                Tom Jones
                MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                PhD, MSc, FIAP, MIITT
                IT Trainer / Consultant
                Ossian Ltd
                Scotland

                ** Remember to give credit where credit is due and leave reputation points where appropriate **

                Comment


                • #9
                  Re: Allow logon locally

                  There is no "log on locally" for domain controllers, as there are no local accounts. Not that I would recommend users logging on to domain controllers, but they need to use a domain account.

                  Comment


                  • #10
                    Re: Allow logon locally

                    Log on locally refers to connecting to the console, as opposed to an RDP session. It is nothing to do with the presence (or absence) of local accounts
                    Tom Jones
                    MCT, MCSE (2000:Security & 2003), MCSA:Security & Messaging, MCDBA, MCDST, MCITP(EA, EMA, SA, EDA, ES, CS), MCTS, MCP, Sec+
                    PhD, MSc, FIAP, MIITT
                    IT Trainer / Consultant
                    Ossian Ltd
                    Scotland

                    ** Remember to give credit where credit is due and leave reputation points where appropriate **

                    Comment


                    • #11
                      Re: Allow logon locally

                      OK, that makes more sense. Still, I'd advise against providing anyone who doesn't administer the domain access to domain controllers.

                      Comment


                      • #12
                        Re: Allow logon locally

                        I'm inclined to agree with bertmax in general.

                        OP - apart from assigning this particular group policy, what are you actually trying to acheive?

                        By this i mean - why do you need the person to be able to logon to the domain controller?
                        Is it a live production requirement, or just testing and learning purposes ?
                        Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

                        Comment

                        Working...
                        X