~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ I would like to give a group of our 2nd level administrators the ability to log on to all Domain Controllers. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Because? -ASB ----- Original Message ----- From: Abbiss, Mark <[EMAIL PROTECTED]> Date: Mon, 13 Sep 2004 14:32:47 +0200 Subject: [ActiveDir] Logging on to a Domain Controller To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> I am going round in circles and am now completely confused ! I would like to give a group of our 2nd level administrators the ability to log on to all Domain Controllers. I have applied a group policy to the "Domain Controllers " OU which sets the "Computer configuration -> windows settings -> security settings -> local policies -> user rights assignment " to give this group "Log on locally" rights. I have also ensured that the group policy is applied to all authorised users. I have no problem logging on as I am an Enterprise Admin, however, the other admins are denied the ability to log on. Therefore, I modified the local DC security settings to give the same group the "Log on locally" right. Still they cannot log on. Please, what could I be missing ? Do I need to set access rights anywhere else ? Can I do anything to troubleshoot what rights this group is getting ? Many thanks for any help. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
