Re: Allow log on locally in Default Domain Controller Policy.

Is your DC also serving double duty as possibly a File or Printer server?

Your System Administrator may have an explanation, if you are not the
sysAdmin...then ask him or her (respectfully, if possible.) if they knew
about it and/or intended to include domain users in the "logon locally"
permission list, and if so...why?

Asked in the right way you may get an explanation that is reasonable, given
the circumstances of your companies environment.

Even the best guidelines have exceptions...that's why the are called
Guideline, instead of rules.
"Rebsu" <Rebsu@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:BD38617E-5A13-4A21-A5D1-A7EB4A732294@xxxxxxxxxxxxxxxx
>I was looking over our group policy settings while studying for 70-292 and
> noticed that the group Domain Users is included in the Allow log on
> locally
> setting in the Default Domain Controller Policy. Is this ok or dangerous?
> Is it necessary? DCs are 2003 standard.


.

Relevant Pages

  • Re: coding conventions
    ... >As a newbie, I don't know them, and would be pleased for a link to an ... >explanation of these guidelines (I sort of think the second is clear, ...
    (comp.lang.java.help)
  • Re: simple way to build rpm?
    ... there's just a lot of explanation there. ... understanding how building an RPM works. ... It could be split up into multiple pages to make it seem simpler. ... Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines ...
    (Fedora)