[windows2000] Re: windows 2000 policy problem

  • From: "Dennis Appelboom" <dennis.appelboom@xxxxxxxxxx>
  • To: <windows2000@xxxxxxxxxxxxx>
  • Date: Thu, 24 Apr 2003 10:13:19 +0200

Thanks for responding Joe.
=20
Thec reason I am messing around with the policies is that I have Backup =
Exec running. In order to make a backup of the system state, I need an =
account with the 'log on as a service' right to use the BE client. Since =
I created a special backup user, with administrator rights, I would =
expect it to work fine......but BE is refusing to backup the system =
state.
While searching to web for solutions, I found an article that described =
my problem, and told me to assign the 'log on as a service' =
right......So that's what I am trying.
=20
I added the domain account to the administrators and domain =
administrators group, and would expect it to have the 'log on as a =
service' right by default, but when I look in the local security policy, =
it tells me that the log on as a service right is overruled.......but I =
don't know by what.....
=20
=20
Regards,
=20
Dennis Appelboom

-----Original Message-----
From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx]
Sent: woensdag 23 april 2003 17:48
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] Re: windows 2000 policy problem



Users don't logon as a service.   A service account can logon using a =
=3D
user account (Thus teh log on as a service).  In most cases, if the =3D
users is not an administrator and you this is a DC then you will need =
=3D
the logon locally right as well.

What are you trying to accomplish?

Joe

-----Original Message-----
From: Dennis Appelboom [mailto:dennis.appelboom@xxxxxxxxxx]
Sent: Wednesday, April 23, 2003 7:12 AM
To: windows2000@xxxxxxxxxxxxx
Subject: [windows2000] windows 2000 policy problem


Hi Group,
=3D20
I have a very annoying policy problem. I would like to assign the 'log =
=3D
on as a service' right to a user.....but am unable to.
Complicating factor is that the server in question is a dc.
I edited the local security policy and added the user to the 'log on as =
=3D
a service' option. But the effective rights are still that the user =3D
cannot log on as a service.....
It tells me that "if domain-level policy settings are defined, they =3D
override local security settings"......ok, that is expected. So I =3D
checked the following:
-OU policies
-Domain Policies
-Domain Controller Policies
But there are none.......
=3D20
What am I forgetting, or doing wrong???
=3D20
Any help is appreciated.
=3D20
=3D20
Regards,
=3D20
Dennis Appelboom
www.marviQ.com


=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D=
3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D
=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

==================================
To Unsubscribe, set digest or vacation
mode or view archives use the below link.

http://thethin.net/win2000list.cfm

Other related posts: