Thanks for responding Joe. =20 Thec reason I am messing around with the policies is that I have Backup = Exec running. In order to make a backup of the system state, I need an = account with the 'log on as a service' right to use the BE client. Since = I created a special backup user, with administrator rights, I would = expect it to work fine......but BE is refusing to backup the system = state. While searching to web for solutions, I found an article that described = my problem, and told me to assign the 'log on as a service' = right......So that's what I am trying. =20 I added the domain account to the administrators and domain = administrators group, and would expect it to have the 'log on as a = service' right by default, but when I look in the local security policy, = it tells me that the log on as a service right is overruled.......but I = don't know by what..... =20 =20 Regards, =20 Dennis Appelboom -----Original Message----- From: Joe Shonk [mailto:JShonk@xxxxxxxxxxxxxx] Sent: woensdag 23 april 2003 17:48 To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Re: windows 2000 policy problem Users don't logon as a service. A service account can logon using a = =3D user account (Thus teh log on as a service). In most cases, if the =3D users is not an administrator and you this is a DC then you will need = =3D the logon locally right as well. What are you trying to accomplish? Joe -----Original Message----- From: Dennis Appelboom [mailto:dennis.appelboom@xxxxxxxxxx] Sent: Wednesday, April 23, 2003 7:12 AM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] windows 2000 policy problem Hi Group, =3D20 I have a very annoying policy problem. I would like to assign the 'log = =3D on as a service' right to a user.....but am unable to. Complicating factor is that the server in question is a dc. I edited the local security policy and added the user to the 'log on as = =3D a service' option. But the effective rights are still that the user =3D cannot log on as a service..... It tells me that "if domain-level policy settings are defined, they =3D override local security settings"......ok, that is expected. So I =3D checked the following: -OU policies -Domain Policies -Domain Controller Policies But there are none....... =3D20 What am I forgetting, or doing wrong??? =3D20 Any help is appreciated. =3D20 =3D20 Regards, =3D20 Dennis Appelboom www.marviQ.com =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D= 3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D =3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D=3D3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ================================== To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm