Domain Admin security

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Windows 2003 AD domain.
I want IT to be able to use admin terminal service session
to administer DCs and other servers.
They are members of Account operators, Server operators
etc but not Domain Admins.
Currently get error "Local policy does not permit you to
logon interactively"
How can I get round this?

Any help appreciated.
 
Windows 2003 AD domain.
I want IT to be able to use admin terminal service session
to administer DCs and other servers.
They are members of Account operators, Server operators
etc but not Domain Admins.
Currently get error "Local policy does not permit you to
logon interactively"
How can I get round this?
Click to expand...

Give them the right to logon interactively. :)

It's a local policy, so it needs to be changed on the local system,
giving whatever domain account group the right, then making sure these
guys are in that group.

Jeff
 
This worked. Thanks.
-----Original Message-----


Give them the right to logon interactively. :)

It's a local policy, so it needs to be changed on the local system,
giving whatever domain account group the right, then making sure these
guys are in that group.

Jeff
.
Click to expand...
 
Back
Top