RE: [ActiveDir] Logging on to a Domain Controller

[joe]

Title: Message

Someone is going to ask it so it might as well be me....   Why are you letting non-domain admins log onto domain controllers?     joe From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Abbiss, Mark Sent: Monday, September 13, 2004 8:33 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Logging on to a Domain Controller I am going round in circles and am now completely confused !   I would like to give a group of our 2nd level administrators the ability to log on to all Domain Controllers. I have applied a group policy to the "Domain Controllers " OU which sets the "Computer configuration -> windows settings -> security settings -> local policies -> user rights assignment " to give this group "Log on locally" rights. I have also ensured that the group policy is applied to all authorised users. I have no problem logging on as I am an Enterprise Admin, however, the other admins are denied the ability to log on.   Therefore, I modified the local DC security settings to give the same group the "Log on locally" right. Still they cannot log on.   Please, what could I be missing ? Do I need to set access rights anywhere else ? Can I do anything to troubleshoot what rights this group is getting ?   Many thanks for any help.