How to grant local policy rights on server joined to domain ?

  • Thread starter Thread starter Marlon Brown
  • Start date Start date
M

Marlon Brown

On Windows 2000, I need to grant permissions to a domain user account "run
as a service". I need that accomplished only on 5 specific servers.

If I go to Administrative Tools->Local Security Policy, I can include that
account to run as a service just fine, however the Effective Permissions
enforced by the domain override that setting.

Is there any way to grant permissions locally in that situation, or the one
way out is granting this on the OU level ? I would prefer to avoid creating
OU for those servers.
 
This means that the user right is being defined at a higher level. It may be
easier to create an OU, Drop the machines in it and define the User rights
in group policy for those machines. Otherwise you need to find where the
user right is being defined in the policies that are applying to it
 
Back
Top