Scribd
Upload
73 views2 pages

Create A GPO For "Allow Log On Locally" Permission: Friday, June 29, 2018 1:31 PM

The document provides steps for creating a Group Policy Object (GPO) to assign the "Allow log on locally" permission to a specific server. It cautions against modifying the default Domain Controllers Policy and recommends creating an Organizational Unit (OU) to contain computers, then creating and linking a new GPO to that OU. A link is also provided to a beginner's guide on how to assign user rights with a GPO by targeting the relevant OU.

Uploaded by

Departamento de TI Sanclin
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
73 views2 pages

Create A GPO For "Allow Log On Locally" Permission: Friday, June 29, 2018 1:31 PM

The document provides steps for creating a Group Policy Object (GPO) to assign the "Allow log on locally" permission to a specific server. It cautions against modifying the default Domain Controllers Policy and recommends creating an Organizational Unit (OU) to contain computers, then creating and linking a new GPO to that OU. A link is also provided to a beginner's guide on how to assign user rights with a GPO by targeting the relevant OU.

Uploaded by

Departamento de TI Sanclin
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 2

Create a GPO for "Allow log on locally" permission

Friday, June 29, 2018 1:31 PM

Recortado de:
https://social.technet.microsoft.com/Forums/windowsserver/en-
US/8d944475-f65f-4456-981a-cf370f351c56/create-a-gpo-for-quotallow-
log-on-locallyquot-permission?forum=winserver8gen
Can you show me how to do this. I am on this screen and I can right click
and say edit and then go into omputer
Configuration, Policies, Windows Settings, Security Settings,
and Local Policies, and then click User Rights Assignment.

but it is not targeting any specific server. Can you give me the steps to
target specific server in this screen below?

Hi,

from your example, we can see that you are editing the GPO named:
Default Domain Controllers Policy (DDCP).

This is a GPO that you shouldn't adjust, without careful planning, design
and understanding, because it only applies to your Domain Controllers
(DCs), and, it applies to *ALL* DCs, *AND* configuration changes to DCs
affect your whole forest/domain.

So, unless you are intending to make this change globally, don't do this
change, to this GPO.

We can also see that your domain, does not have any new Organisational
Units (OUs) created.
Usually, create an OU for users, and another OU for computers.
(Actually, usually, several such OUs are created, based on your
plan/design).
Then, create the desired GPO, add desired settings to that GPO, then,
link that GPO to the desired OU (where you want the settings to apply).

http://technet.microsoft.com/en-US/library/cc754948.aspx

The dedicated GP forum, is here:


http://social.technet.microsoft.com/Forums/windowsserver/en-US/home?
forum=winserverGP

By default, when a computer is joined to a domain (so it becomes known


as a domain member), the builtin security principal of "Domain Users"
(which represents all user accounts in the domain) is added to the "Users"
group of the domain member machine. This allows any/all/every domain
user account to logon locally to the member machine. If you
change/deny/revoke this permission, ensure that you scope the
settings/policy correctly! (if not, you will be dis-allowing all logons to that
machine, and it is annoying and frustrating to perform recovery) (which is
fine if you are learning in a test environment, but can be disastrous in a
production environment :)

Página 1 de Windows Server 2012 R2


production environment :)

Here is a beginners guide/example: http://technet.microsoft.com/en-


us/library/cc754657(v=WS.10).aspx

Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer",
where applicable.
This helps the community, keeps the forums tidy, and recognises useful
contributions. Thanks!)

Página 2 de Windows Server 2012 R2

You might also like