Cannot Find Policy

[dljohnson19]

I am trying to add a local user to with logon locally rights to the server but it will not logon. It shows the user with the local rights but it's effective rights show it does not have the right to logon locally. I cannot find what policy or right is overtaking the local right. I am 95% sure the offending right or policy is on this box though and not a domain right or policy. Any ideas??

 

[GrnEyedLdy]

What policy are you editing? Local Security Policy?

Is the Server part of a Domain? You do realize that Domain Policy overrides Local policy.

Check the Domain Policy.


Patty

 

[dljohnson19]

Yes, I am aware that domain policy does override local. Like I said, I don't think that is what it is as this box is setup exactly like the other boxes I have EXCEPT this one is Win2000 server and the others are NT4. I just think there is something I am overlooking and 2000 just locks down more than NT4. Domain policy has not changed.

 

[GrnEyedLdy]

Is this Server a DC?

 

[dljohnson19]

No it is not.

 

[GrnEyedLdy]

Have you tried GpResult?

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/gpresult-o.asp

Hope this helps,

Patty

 

[Seaspray0]

In Active Directory, go to the organizational unit which contains the PC account of the computer that the user is trying to log in. Check and see if you have any group policies on this organizational unit. If so, check the machine policy to see if the right to log on locally is specified, If so, see if the user has the right to log on locally. Note: if the user is a member of the groups listed as having this right, then they should be able to log on.

If the organization unit doesn't have a group policy or the right is not specified, then preceed to upper level organizational units back towards the domain policy until you find where it is specified.

If a pc is joined to a domain, then policies are applied as follows: local, site, domain, Organizational Unit, Organizational units located inside the upper level organizational unit.

The last policy that defines a setting will null and void all previous definitions to this setting and overwrite it with what it states.

A+/MCP/MCSE/MCDBA