Re: Preventing logon to local accounts

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Make sure that this user is a members of "Remote Desktop Users" group...

hth
Marcin

"BeckyBoo123" <BeckyBoo123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:0C263AAE-542C-4BD9-88A8-3DBE24EC1530@xxxxxxxxxxxxxxxx
Great! I have removed the local user account now and only left a local
admin
account in place. I can log to the domain with my test user profile and it
works great.
One more thing, a lot of our users are VPN users and need to be able to
use
RDC to work from home.
When I try to connect to this PC via RDC, using the test user login
details
for the domain I get this error message "The local policy of this system
does
not permit you to logon interactively".

Can I get around this?

"Marcin" wrote:

You can use "Allow log on locally" Group Policy setting (Computer
Configuration\Windows Settings\Security Settings\Local Policies\User
Rights
Assignments) and replace local Users with Domain Users in the listing of
groups in this category. Just make sure you test this on target PCs to
avoid
any collateral damage...

hth
Marcin

"BeckyBoo123" <BeckyBoo123@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:64EDC805-B26B-4349-889E-D7A0BD6DDC31@xxxxxxxxxxxxxxxx
Next question for you all, Jamie, are you there?! :-)

As I am new to AD/TS I was wondering if there is a way to prevent users
logging on to the local account on their PC's and forcing them log in
to
the
domain only?

I only have one PC on our new domain so far which I am using as a test
machine. If I log in to the domain everthing works perfectly.
However if I log in locally, I can do whatever I like with out any
policy
restrictions.

How have people got around this before?





.

Relevant Pages

  • Re: Preventing logon to local accounts
    ... I have removed the local user account now and only left a local admin ... RDC to work from home. ... for the domain I get this error message "The local policy of this system does ...
    (microsoft.public.windows.server.active_directory)
  • Re: RDC working-one session per boot
    ... Norton Antivirus 2005 on both the host and client.Since I have no ... experience with RDC prior to this, I do not know if the problem is related ... My research suggests that the fact that the account is still logged on ... is in an abnormal state after the disconnect. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Is it possible to calculate running sums in an access form
    ... > I've created my form as a sub form. ... When I select my account, ... > want the DSum function to only look at the account I've seleceted. ...
    (microsoft.public.access.forms)
  • RE: Switch users under Remote Desktop
    ... I think I may prefer to use RDC in certain ... under a Standard account. ... I guess I can hide the Administrator account as you suggest and use the ... other account with administrative privileges, but this is a side issue. ...
    (microsoft.public.windows.vista.administration_accounts_passwords)
  • Re: RDC working-one session per boot
    ... including loging off the account after x minutes. ... > the host account does not clear the condition. ... > a second different client and host admin account to establish an RDC ... > session after disconnecting the first and experience the same failure. ...
    (microsoft.public.windowsxp.work_remotely)