Re: Desperate seeking some tech. information

From: Stan White [MS] (stanwh_at_microsoft.com)
Date: 07/19/04 

Date: Mon, 19 Jul 2004 10:53:29 -0700

SMS does not make any changes to domain group policy.
If you specify a windows user account as a service account and the account
is missing rights to log on as a service or local admin rights on the site
server you will be prompted before any rights are granted.
SMS uses AD as a secure information store for locating servers and
boundaries, and providing a public key for data validation.
(If you choose to extend the schema). 

-- 
-- 
Stan [MSFT]
--
--
This posting is provided "AS IS" with no warranties, and confers no rights.
--
--
"pdk" <anonymous@discussions.microsoft.com> wrote in message 
news:2f49f01c46d63$0702f240$a401280a@phx.gbl...
>
> I am troubleshooting some settings in The default domain
> policycausing problems around the Enterprise.
>
> We have security settings that we can not explain and
> suspects the upgrade of SMS2000 => SMS2003 to have
> something to do with it.
>
> Does SMS alter the security settings in the default domain
> policy as it adds something but I can not locate
> information on what SMS exactly does during installation.
>
>

Relevant Pages

  • Re: Event 1202 Warnings after Renaming Administrator Account on SBS200
    ... Default Domain Controller's Policy is "Impersonate a client after ... setting/User Rights Assignment and the default setting for SBS2003. ... change the account name to which this policy setting/User Rights ... Restricted Groups and containing Source GPOs that are ...
    (microsoft.public.windows.server.general)
  • Re: Access Denied to XP Remote Control -- Please Help!
    ... SMS admin UI, so focus your troubleshooting efforts there. ... doesn't grant that user remote tools right, ... with correct rights is used for the NT4 and W2K machines? ... > Account causing problems. ...
    (microsoft.public.sms.admin)
  • Re: No users on Welcome Screen after using cntrl passwords2 in XP Home
    ... administrator policy to a little more secure like power user. ... into safe mode and logged into Admin account, and could not find the other ... as Guest user rights and was unable to make any changes due to ...
    (microsoft.public.windowsxp.help_and_support)
  • Event 1202 Warnings after Renaming Administrator Account on SBS200
    ... Default Domain Controller's Policy is "Impersonate a client after ... change the account name to which this policy setting/User Rights Assignment ... corresponding GPO that contains the problem policy setting is listed under ...
    (microsoft.public.windows.server.general)
  • Event 1202 Warnings after Renaming Administrator Acct on SBS2003
    ... retained in two locations - Active Directory and Global Policy. ... Administrator account. ... Administrator account that consisted of simply modifying the AD properties ... setting/User Rights Assignment and the default setting for SBS2003. ...
    (microsoft.public.windows.server.general)
Loading