local user in log on as service group polcy Event log error 1202

From: "Ken Hack" <youmustbekidding@xxxxxxxxxxx>
Date: Tue, 18 Jul 2006 11:12:06 -0400

Hi all,

We have a couple of servers that use a local user to log on as a service. We
have a group policy that authorized a certain number of domain users that
could log on as a service. This group policy applies to all servers in our
environment. When we add a local user to this policy it creates 1202 errors
in the event log as most of our server don't have this user locally.

Do we need to remove these local users from this group policy and add them a
group policy that only applies to these individual servers ? This seems to
defeat the rational of the whole group thing though.

or

should we exclude these servers from this group policy and apply local
security policies to these servers ?

Is there another method that I haven't thought of ?

Thanks,

Ken

.

Prev by Date: Controlling a single user
Next by Date: Re: Updating GPO trees
Previous by thread: Controlling a single user
Next by thread: Re: Updating GPO trees
Index(es):
- Date
- Thread

Relevant Pages

Re: Terminal Server GPO Issue
... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
(microsoft.public.windows.server.active_directory)
Re: Terminal Server GPO Issue
... servers that is not in the OU where the GPO is supposed to be applied and I ... Microsoft Windows Operating System Group Policy Result tool v2.0 ... Sharepoint Auth GPO ... Event Log Settings ...
(microsoft.public.windows.server.active_directory)
Re: Application error log
... Disclaimer: This posting is provided "AS IS" with no warranties, ... I have 3 servers in our office running win 2003 R2 servers ... I did not set any group policy in my servers. ...
(microsoft.public.windows.server.networking)
Re: Application error log
... Are the errors because of this missing entry. ... I have 3 servers in our office running win 2003 R2 servers ... I did not set any group policy in my servers. ... Windows cannot query for the list of Group Policy objects. ...
(microsoft.public.windows.server.networking)
Re: Unable to Block Group Policy Inheritance
... have a group policy named Login that is at the user level that maps ... named Servers that I want to block the inheritance of the group policy ... This means that you cannot block inheritance ...
(microsoft.public.windows.server.active_directory)