|
Home > Archive > Windows 2000 track general > September 2001 > How can domain users log on locally on 2ksrv?
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
How can domain users log on locally on 2ksrv?
|
|
| netnewsnow 2001-08-29, 5:43 pm |
| How can you log on locally with domain user credentials on a win2k server? | |
| Joe Blacke 2001-08-29, 10:28 pm |
| You can either add the domain account to a group that has the ability to log onto the server. Such groups are the Admins, backup operators, print operators, etc.
Or, you can change the group policy that is applied, and grant the user/group the right to log on locally. | |
| Slinky 2001-08-30, 8:58 pm |
| I agree. Though adding the member to print operators, server operators, or administrators will usually give the member more rights and permissions than they usually need. The preferred method is giving them the logon locally right. This of course doesn't really matter on a home network. | |
| TW2001 2001-08-31, 5:28 pm |
| You enable the log on locally property in the security settings. | |
| netnewsnow 2001-08-31, 6:23 pm |
| Thats what I'm asking, where is this security setting to grant a user the log on locally possibility. I'm just testing on a home network with terminal server, and need to see what I can do with just a user account. | |
| Joe Blacke 2001-08-31, 11:45 pm |
| If the server is part of active directory, go to Active directory users and computers, choose the appropriate container that holds the server's computer account (it may be under the computers container, domain controllers, or a different ou depending on how your network is set up). Right click the appropriate container and choose properties. On the group policy tab, click edit for the appropriate GPO and expand computer configuration-windows settings-security settings-local policies, and click on user rights assignment. In the details pane (the one on the right), locate the "log on locally" and double click. Add the users or groups to this policy setting. Either restart your pc, or go to a command prompt and type " secedit /refreshpolicy machine_policy /enforce " without the "" marks, or wait until the next group policy propagation.
If using a workgroup, go to local security policy and expand local policies, and click on user rights assignment. Follow the above procedures to add the appropriate users/groups and to refresh group policy. | |
| dentonb2000 2001-09-01, 11:28 am |
| If you are talking logging in locally to a terminal server, depends on what mode terminal services is running in. If you are running in remote admin mode, then making the individual an admin is the only feasible means. If you are running in Application mode, then grant the user log in locally with gpedit.msc. Computer Settings/Security Settings/Local Policies/User Rights Assignments. The recommended method would be to create a security group and add the individual user accounts to this group.
Denton
quote:
Originally posted by netnewsnow
Thats what I'm asking, where is this security setting to grant a user the log on locally possibility. I'm just testing on a home network with terminal server, and need to see what I can do with just a user account.
|
|
|
|
|