Re: Solution to the age-old Branch Office problem?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Not going to look to see if they do or don't. If it's a DC they have the
rights in the domain and not just locally (respect to the dc.) Bigger
question is why you want the locals to logon to the machine? What's the
intended purpose that would cause them to logon locally vs. something like
iLO access (any out of band solution that let's you see the boot process
would work fine in many situations?)


I can't think of a reason a local admin would require physical access to a
DC console. It doesn't make a lot of sense to me, but I'm interested in
hearing it if there is one. I can always stand to learn something new. :)

Al



"Spin" <Spin@xxxxxxxx> wrote in message
news:3t450nFqcj8aU1@xxxxxxxxxxxxxxxxx
> Do server operators not have logon locally rights to a DC?
>
> --
> Spin
>
>
> "SystmProg" <SystmProg@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:57145BD4-42BD-4A17-9903-C09D0A704717@xxxxxxxxxxxxxxxx
>> You need to create Groups so-called BranchOffice Admins > add these users
>> to
>> this group and then assign these groups the *Log on Locally* rights.
>>
>
>


.



Relevant Pages

  • RE: IDS and Spywares
    ... > rights if they aren't actually a sysadm. ... > absolutely no reason for a user to be a local admin all the time. ... I totally agree with, you, and I use privilege restrictions a lot (O.S. ...
    (Focus-IDS)
  • Re: Automatically making AD users local administrators on computers in SBS 2003
    ... best" when assigning user rights. ... provide the client this account and password. ... can use this special local administrator account. ... > This will automatically give each user that logs in local Admin rights. ...
    (microsoft.public.windows.server.sbs)
  • Re: Removing Local Admin Rights...
    ... > None of our users have admin rights. ... Some software will run only under local admin user accounts. ... > Ethical Hacking at the InfoSec Institute. ... > pen testing experience in our state of the art hacking lab. ...
    (Security-Basics)
  • RE: Correct setup of XP-Pro computer on Win2K Domain
    ... Setting up a local account on the xp machine does not result in local admin ... rights for that user, you need to put them in the local admin group. ... > inconsistent problems with security when I setup a new XP-Pro workstation. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: User accounts being deleted
    ... doesn't run correctly unless the user has local admin ... rights to their system. ... >Hi Andy, ... >> noticed that users accounts on their workstations had ...
    (microsoft.public.backoffice.smallbiz2000)