Re: Problems since SP1 (Server 2003) - 2nd request for help

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



You need to edit the Group Policy Object that applies to your domain controller. By default, this would be the Default Domain Controllers Policy [Security Settings section].

The easiest way to edit it is to Open Administrative Tools, and double-click the Domain Controller Security Policy.

Expand Local Polices on the left, then click on User Rights Assignment to select it.

-TP

Mel wrote:
This is the domain controller. The Group "Remote Desktop Users" for
some reason have not been given this right. This is what I am trying
to correct.

Thanks

Mel


.



Relevant Pages

  • Re: using secpol.msc on win2k3
    ... edit will be local, not using network login rights. ... Oh, to answer you, on a domain controller you do use an AD based GPO, ... The checkbox for enabling this policy is not visible. ...
    (microsoft.public.security)
  • Re: Group policy - another newbie question
    ... Domain Controller Security Policy is exactly that. ... (just the security settings) ... navigate to the Group Policy tab and edit the Default Domain ...
    (microsoft.public.win2000.group_policy)
  • Re: User Account Repeatedly locks-up
    ... policy setting or local security settings (if ... Navigate to Security Settings> Local Policies> Audit Policy ... Open "Audit logon events" policy property page ...
    (microsoft.public.security)
  • Re: Outlook Security Forms will not update membership properly
    ... Edit each security settings item by using the Edit | Revise Contents ... Sue Mosher, Outlook MVP ...
    (microsoft.public.outlook.general)
  • Re: Default Domain Security Settings and DC Security Settings
    ... Security settings applied at the domain level shouldn't be ... level is independant of the policy. ... >> The Default Domain Controller Policy applies to the Domain Controllers ... >>> the domain, member servers, DCs, and member client machines. ...
    (microsoft.public.windows.server.active_directory)