Re: Members of Print Operators Can not log on locally

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: partagas (partagas_at_insightbb.com)
Date: 03/10/04


Date: Wed, 10 Mar 2004 16:35:37 GMT

I resolved the issue but your reply did not address my problem. As I stated,
the print operators, server operators and account operators groups DID NOT
show up in the lists of available groups to be allowed to log on locally. If
it were as simple as that I would have done that. The problem was that these
groups did not show up.

"Chriss3" <noSpamHere@chrisse.se> wrote in message
news:uRuiz3fBEHA.1544@TK2MSFTNGP09.phx.gbl...
> Hi partagas ,
>
> On domain controllers: Account Operators, Administrators, Backup
Operators,
> Print Operators, and Server Operators should be allowed to logon locally
by
> default.
>
> On workstations and servers: Administrators, Backup Operators, Power
Users,
> Users, and Guest.
>
> (As you can see Printer Operators are not added here by default.) You can
> allow Printer Operators to Allow logon locally even to workstations and
> member server.
>
> To do so use Group Policy, Use the Default Domain Policy or create a new
one
> and define the Allow logon locally to fit your needs.
>
> Computer Configuration\Windows Settings\Security Settings\Local
> Policies\User Rights Assignment\Allow log on locally
>
> I hope that helps , Have a nice day!
>
> --
> Regards
> Christoffer Andersson
>
> No email replies please - reply in the newsgroup
>
> "partagas" <cohiba@insightbb.com> skrev i meddelandet
> news:yji3c.159368$4o.200048@attbi_s52...
> >
> > "partagas" <cohiba@insightbb.com> wrote in message
> > news:rYd3c.151976$Xp.624140@attbi_s54...
> > > I can not get anyone in the Built-In Print Operators group to log onto
> any
> > > domain controllers. I thought that they had default user's rights to
do
> > > this. When I view the Default Domain Controllers Policy's User Rights
> > > Assignment Object, I do not find the Print Operators Built-In group
> there.
> > > If I go to ad it, it does not show up in the list of available groups.
> Is
> > > this right? What is wrong?
> > >
> > >
> >
> >
>
>



Relevant Pages

  • Re: restrict reset of Admin Password
    ... Server operators and account operators can not reset or otherwise modify ... could also look into AD delegation at the domain or OU level that will allow ...
    (microsoft.public.win2000.security)
  • built-in abilities
    ... Backup files and directories ... Share and stop sharing directories ... be a member of Server Operators AND Account Operators. ...
    (microsoft.public.security)
  • Re: built-in abilities
    ... > be a member of Server Operators AND Account Operators. ... > - Change the system time ... You already know that each of these privileges can be enabled or disabled as ...
    (microsoft.public.security)
  • Re: dsHeuristics
    ... it is the 16th character in the attribute. ... Bit 0: Account Operators ... Bit 1: Server Operators ... set in the dsHeuristics string? ...
    (microsoft.public.windows.server.active_directory)
  • Delegate permission to full control OU (GPO):getting access is denied. Server Operator can do it.
    ... MyAdmin is member of Group Policy Creator Owner. ... If I add the fellow to the "Server Operators" group he is able to accomplish ... Operator has read+execute permissions to Sysvol? ...
    (microsoft.public.win2000.active_directory)