I have given a user the right to Log on Locally to a Domain Controller. I did it through a GPO to the domain. When the user tries to log on, windows displays an error message that says "User does not have the right to log on interactively." what is my problem?
-
-
HI sir,
Make that user has a member of backup operator and logon, logon will success. -
Originally posted by adminnewbie
Local and Domain logons are distinct keep that in mind. I would create the username and then try it out myself. Usually its the group the user is in that defines his/her rights to log on.
Good Luck.Comment
-
They are distinct except on DCs (Domain Controllers).Originally posted by Cyberdyne
The rest of the advice is good - it's much easier to manage domain security using groups than individual users, but be aware, in most cases (not this one) when you've added a user to a group they will need to log out then in again before the system recognises their new rights.
Only add a user to the 'Backup Operators' group if you really don't care about security. It's a bit like making them God in most setups.Comment
Comment