Re: Domain Users group does not retain the Log on Locally right

OK here's another strange thing. When setting up the computer account on the
SBS server using the wizard the section for "Mobile Client and Offline Use"
I would not select either options. This time I di select "Install Connection
Manager" and it did what I wanted it to do. the machine joined the domain,
rebooted and I logged in and can now see the Domain Users in the Log on
Locally policy. This is so strange as I had others that I redid and id not
select this option and it worked the same way. now it is working for his
machine and I'm going to try onanother one that I also had previously
successfully completed but after the updates the Domain Users disappeared.
This stuff is weird and is blowing my mind. I'm so confused that I have a
checklist.


"Dave Nickason [SBS MVP]" <gwdibble@xxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:uJ%23WAhUUHHA.5016@xxxxxxxxxxxxxxxxxxxxxxx
On an effected workstation, Start -> Run -> rsop.msc. You'll get a result
showing the group policies applied to that machine and user account.
Check for conflicting policies - if you find any, it'll tell you where
they are applied from so you can edit accordingly.


"AllenM" <noemail@xxxxxxxxxxxxx> wrote in message
news:%2306DDdUUHHA.1000@xxxxxxxxxxxxxxxxxxxxxxx
I've got some workstations here in the office that appear were not joined
to the SBS domain by using the SBS wizard. I discovered this when other
users were not able to log onto any machine in the office because "Domain
Users" were not members of the "Log on Locally" policy. So what I have
been doing is removing the workstation from the domain, deleting the
computer account from AD and then readding the computer account then
going to the workstations and logging in as local administrator and
running \\servername\connectcomputer.
My issues are that when I do this I go to check the local policy on the
workstations and it does add Domain Users to the Lo on Locally policy. So
now I run Windows and Microaoft Updates and have noticed that these
machines where I had to rejoin the domain are not retaining the Domain
Users group in the Log on Locally policy. In fact when I go to view the
policy and membership I can see the members but now they are all greyed
out and I cannot manually edit them. So it appears that updates are
somehow affecting this process. Any ideas? I have checked my Domain GPO
and yes Domain Users are in the Lo on Locally domain policy.





.

Relevant Pages

  • Domain Users group does not retain the Log on Locally right
    ... I've got some workstations here in the office that appear were not joined to ... were not able to log onto any machine in the office because "Domain Users" ... My issues are that when I do this I go to check the local policy on the ... workstations and it does add Domain Users to the Lo on Locally policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Software Restrictions
    ... When I denied Project Users Read & Apply Policy, ... user could not access any of the restricted applications to include Project. ... >>I want to implement 2 GPOs to restrict certain software. ... >> be applied to the Domain Users security group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Preventing logon to local accounts
    ... If you have group policy management console installed on your DC then you ... The firewall is disabled on the workstation. ... once connected, expand local users and groups, then select groups, open ... Domain Users in the listing of groups in this category. ...
    (microsoft.public.windows.server.active_directory)
  • RE: NEW sbs install creates domain users with local admin rights
    ... I understand that all the local policy is set ... Microsoft CSS Online Newsgroup Support ... NEW sbs install creates domain users with local admin rights ...
    (microsoft.public.windows.server.sbs)
  • Re: Domain Users group does not retain the Log on Locally right
    ... Readded the computer account. ... Computer reboot when completed. ... Logged onto the SBS Domain as administrator. ... Went in the Local Policy Editor and cofirmed that DOMAINANME\Domain Users ...
    (microsoft.public.windows.server.sbs)