Re: Domain Users group does not retain the Log on Locally right



On an effected workstation, Start -> Run -> rsop.msc. You'll get a result
showing the group policies applied to that machine and user account. Check
for conflicting policies - if you find any, it'll tell you where they are
applied from so you can edit accordingly.


"AllenM" <noemail@xxxxxxxxxxxxx> wrote in message
news:%2306DDdUUHHA.1000@xxxxxxxxxxxxxxxxxxxxxxx
I've got some workstations here in the office that appear were not joined
to the SBS domain by using the SBS wizard. I discovered this when other
users were not able to log onto any machine in the office because "Domain
Users" were not members of the "Log on Locally" policy. So what I have
been doing is removing the workstation from the domain, deleting the
computer account from AD and then readding the computer account then going
to the workstations and logging in as local administrator and running
\\servername\connectcomputer.
My issues are that when I do this I go to check the local policy on the
workstations and it does add Domain Users to the Lo on Locally policy. So
now I run Windows and Microaoft Updates and have noticed that these
machines where I had to rejoin the domain are not retaining the Domain
Users group in the Log on Locally policy. In fact when I go to view the
policy and membership I can see the members but now they are all greyed
out and I cannot manually edit them. So it appears that updates are
somehow affecting this process. Any ideas? I have checked my Domain GPO
and yes Domain Users are in the Lo on Locally domain policy.



.



Relevant Pages

  • Domain Users group does not retain the Log on Locally right
    ... I've got some workstations here in the office that appear were not joined to ... were not able to log onto any machine in the office because "Domain Users" ... My issues are that when I do this I go to check the local policy on the ... workstations and it does add Domain Users to the Lo on Locally policy. ...
    (microsoft.public.windows.server.sbs)
  • ATTN: Dave Nickason - See my last comments Re: Domain Users group does not retain the Log on Loc
    ... to the SBS domain by using the SBS wizard. ... Users" were not members of the "Log on Locally" policy. ... workstations and it does add Domain Users to the Lo on Locally policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... a virus in play. ... settings to be applied on your client workstations. ... Group Policy is a complex and often misunderstood beast. ... I modified the account ...
    (microsoft.public.windows.server.sbs)
  • Re: The local policy of this system does not permit you to logon i
    ... Security policies were propagated with warning. ... Error 0x534 occurs when a user account in one or more Group Policy objects ... I have checked the security policies & the administrator profile is not ...
    (microsoft.public.windows.server.sbs)
  • Re: GPO causing client security logs to fill?
    ... Unlink the Default Domain Controller Policy (As it was not previously ... settings to be applied on your client workstations. ... I modified the account ... So basically, the Account lockout threshold, account lockout ...
    (microsoft.public.windows.server.sbs)

Loading