Re: Re: Re: GPO- Local DC logon

"" wrote:
> I'm assuming that you've read the KB article listed in the
> dialog box
> (823659) which describes why it's not a good idea to allow
> "Log on Locally"
> for Authenticated Users on your DC. If you still want to make
> the change,
> I'm not sure why it's not allowing it through the dialog, but
> you should be
> able to manually edit the gpttmpl.ini file in the Default
> Domain Controller
> Policy folder tree.
>
> I don't have access to one of my DC's right now, but you'll
> find it if you
> look under the policy folder with the GUID that starts with
> "{6AC..." You
> basically add the SID for the Authenticated Users group
> (below) to the
> SeInteractiveLogonRight Right listed in the file.
>
> SID: S-1-5-11
> Name: Authenticated Users
> Description: A group that includes all users whose identities
> were
> authenticated when they logged on. Membership is controlled by
> the operating
> system.
>
> --
> Mike Shepperd
> MCSE NT4, 2000, 2003
> NewFuture Consulting
> Seattle, Washington
>
>
> "bpereira" <DoNotEmail@xxxxxxxxxxxxxxxxx> wrote in message
> news:3_1302327_cd98371934fa5c0096cc9c9fb455e9ae@xxxxxxxxxxxxxxxxxxxx
> > "" wrote:
> > > Are you making the change in the Default Domain Controller
> > > Policy? If you
> > > make it in any other policy at a higher level, the DDCP
> will
> > > apply last and
> > > potentially overwrite the permissions previously laid
> down.
> > >
> > > --
> > > Mike Shepperd
> > > MCSE NT4, 2000, 2003
> > > NewFuture Consulting
> > > Seattle, Washington
> > >
> > >
> > > "bpereira" <UseLinkToEmail@xxxxxxxxxxxxxxxxx> wrote in message
> > >
> > > news:3_1301624_334f2cb7b345369e0e3d543021c3101a@xxxxxxxxxxxxxxxxxxxx
> > > > Hi guys!
> > > >
> > > > Why canâ?Tt I change the allow log on locally on my dc?
> > > >
> > > > Running win 2k3 st. ed. Iâ?Tm domain admin.
> > > >
> > > > Thx
> > > >
> > > > --
> > > > Posted using the http://www.windowsforumz.com interface, at author's
> > > > request
> > > > Articles individually checked for conformance to usenet
> > > standards
> > > > Topic URL:
> > > > http://www.windowsforumz.com/Group-Policy-GPO-Local-DC-logon-ftopict395138.html
> > > > Visit Topic URL to contact author (reg. req'd). Report
> > > abuse:
> > > > http://www.windowsforumz.com/eform.php?p=1301624
> >
> > http://img342.imageshack.us/img342/9291/logon8vf.jpg
> >
> > The buttons arenâ?Tt active.....this is my problem....
> >
> > THX!

Thanks for your help, but I canâ??t find this file: gpttmpl.ini.
.