Re: cannot log on to DC

Howdie!

aconti schrieb:
> You cannot log on because the logon method you are using is not allowed
> on this computer. Please see your network administrator for more info.
>
> I am trying to log on to a DC using a normal user which I have given
> him delegation of control for a particular OU so that he can log in and
> use the delegated control whenever needed from the DC. I have added the
> user to the login locally list on the Domain Controller group policy
> setting, can you pls help identify the problem.

Yep, I agree with Meinolf here. DC logon should only be allowed to
domain and enterprise administrators. If you need people to log on to
machines, have them log on to Terminal Servers - not the DC. Is there a
reason you want a user to log on there? Is it just delegation of rights
so that they can manage OUs? If so, download RSAT and install it on the
users' machines and have them run them from their workstations.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
ANY advice you get on the Newsgroups should be tested thoroughly in your
lab.