Re: Should I be able to log on to the local computer?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Two concepts - "log on locally" means to log into the actual machine, as opposed to logging in remotely. "Local user accounts" are those that only exist on that computer, as opposed to domain accounts. You can't have local accounts on a domain controller (like SBS), so even though the tech support people are logging in locally, they're using a domain account to do so. They need domain\username, not local computer name\username, despite the fact that they're logging in locally.

Please make notes of anything you change for these support people, in case you get an unintended result or need to undo something. For example, if their account is a member of Domain Admins, you didn't need to edit the group policy for them to log in. I haven't always had great success with 3rd party support people, and I'm selective about which of their requests I honor. I recommend making sure you supervise them closely, and make sure you understand every change they make outside of their own application.


"Jon Fleming" <jonf@xxxxxxxxxxxxxxxxxx> wrote in message news:8f5j055e8t02v4alsoe5dirrreq6nsql6d@xxxxxxxxxx
I'm having a problem with an application on my SBS 2008 Standard
server, and the tech support people want me to allow the user I
created for them to be able to log on to the local machine, and they
want me to do so and do some stuff in HKCU. So I edited the default
domain controller GPO at Computer Configuration\Policies\Windows
Settings\Security Settings\Local Policies\User Rights Assignment and
added their user. I ran gpupdate /target: computer.

But if I log off or switch user, and try to log in to {local computer
name}\{username}, I always get "The username or password is
incorrect". Same thing for my super-user identity or any other
identity that IMHO should be able to log on locally.

Am I missing something?

.



Relevant Pages

  • Re: Logon Domain
    ... If the user has accounts in multiple domains and for whatever reason the ... administrator wants a particular domain computer to allow logging on to a ... That setting controls ... A user logging on ...
    (microsoft.public.win2000.security)
  • Re: Logging in to a domain versus using domain "resources"
    ... Windows 2000 and Windows XP computers) that use their names, ... Active Directory with the same passwords that the users use as their ... between logging in to the domain, and logging in to the local ... access whatever the domain accounts are granted permission to access. ...
    (microsoft.public.windows.server.networking)
  • User settings not saving during shutdown
    ... Running SP2/AMD64 - PC is failing to save the user settings during the ... shutdown process ON ALTERNATE shutdowns...Win boots up ok but problem ... occurs logging into accounts on alternate start ups and when logging ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Logon Domain
    ... where I want a regular ... user from logging onto my computer with their account from ... >> If the user has accounts in multiple domains and for whatever reason the ... > administrator wants a particular domain computer to allow logging on to ...
    (microsoft.public.win2000.security)
  • ToolsServices vs ToolsAccounts
    ... have had some problems with email accounts recently. ... We (tech support rep and I) are able to ... I never seen Outlook set ...
    (microsoft.public.outlook.program_vba)