Hi Andrew,

I should ask this with more detail.  If this is granted to the 'domain user'
group in a domain then how does this pose a problem?  What, or is there
somewhere I can check since I did not find it on Technet, the definitions of
'Log on Locally' or 'Log on as a service'?

Thank you,

Erik L. Vesneski
Epicentric, Inc.

-----Original Message-----
From: Andrew Baker [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 13, 2002 6:54 AM
To: MSWinNT Discussions
Subject: RE: Log on as a Service and Log on Locally


If those rights are granted on a machine which is a domain controller, then
YES, it could pose a problem.

If it's on a standard workstation or member server, then they'd pretty much
be limited to that system.

 

==============================================================
 ASB - http://www.ultratech-llc.com/KB/?File=~MoreInfo.TXT
==============================================================
 Automation Leads To Relaxation...
 


-----Original Message-----
From: Erik L. Vesneski [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, March 13, 2002 9:51 AM
To: MSWinNT Discussions
Subject: Log on as a Service and Log on Locally


Hi,

With regard to the:

Log on as a Service

&

Log on Locally

account rights, can a user do anything to the domain when enabled with
these rights?

Do these rights pose a risk when granting them?

Thank you,
Erik Vesneski


------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to