I am having a real problem getting my head round setting the "log on locally" policy for a group of computers.
What I am hoping to achieve is the ability to allow different groups of sub-administrators the rights to log on locally to the servers they are responsible for. Currently, log on locally is only allowed to the Enterprise admins but as the number of servers grows and we need to delegate responsibuility to other nominated administrators, we find they are blocked from logging on and we can't find a clean solution. Can someone please point me in the direction of a tidy solution to the problem. Many thanks List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
