~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Is it really important why ? ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Yes. Very, in fact. If we understand your goal, we may be able to help you reach that objective without negatively impacting your environment. If you'd prefer that we just let you cut out your spleen without asking why, we can oblige as well... -ASB On Tue, 14 Sep 2004 14:59:48 +0200, Abbiss, Mark <[EMAIL PROTECTED]> wrote: > Is it really important why ? I just want to know how it might be done. I am > weird like that. > > Thanks for any other tips anyone might have. > > > > > -----Original Message----- > From: ASB [mailto:[EMAIL PROTECTED] > Sent: Montag, 13. September 2004 21:44 > To: [EMAIL PROTECTED] > Subject: Re: [ActiveDir] Logging on to a Domain Controller > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > I would like to give a group of our 2nd level administrators the ability to > log on to all Domain Controllers. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > > Because? > > -ASB > > ----- Original Message ----- > From: Abbiss, Mark <[EMAIL PROTECTED]> > Date: Mon, 13 Sep 2004 14:32:47 +0200 > Subject: [ActiveDir] Logging on to a Domain Controller > To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> > > I am going round in circles and am now completely confused ! > > I would like to give a group of our 2nd level administrators the ability to > log on to all Domain Controllers. I have applied a group policy to the > "Domain Controllers " OU which sets the "Computer configuration -> windows > settings -> security settings -> local policies -> user rights assignment " > to give this group "Log on locally" rights. I have also ensured that the > group policy is applied to all authorised users. I have no problem logging > on as I am an Enterprise Admin, however, the other admins are denied the > ability to log on. > > Therefore, I modified the local DC security settings to give the same group > the "Log on locally" right. Still they cannot log on. > > Please, what could I be missing ? Do I need to set access rights anywhere > else ? Can I do anything to troubleshoot what rights this group is getting ? > > Many thanks for any help. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
