Strange Security

Help,

I have got an installation where it appears the domain users have full
access to the system. They are able to logon to the server directly and
unlock workstations that have been logged by the domain admin.

The domain users are members of the following:- LocalSite Distribution List;
Domain user, and another distribution list.

Can anyone give me some advise as to where to look to find out why they are
able to do this. I have created new users and they too get the same rights.

I have checked with a test system and it all appears to be the same but on
the test system users and not allowed to logon to the server direct as I
would expect.

Thanks
Dave

Are any of the groups they belong to in the Domain Admin group?


"Dave Taylor" <dt-> wrote in message
news:...
> Help,
>
> I have got an installation where it appears the domain users have full
> access to the system. They are able to logon to the server directly and
> unlock workstations that have been logged by the domain admin.
>
> The domain users are members of the following:- LocalSite Distribution
List;
> Domain user, and another distribution list.
>
> Can anyone give me some advise as to where to look to find out why they
are
> able to do this. I have created new users and they too get the same
rights.
>
> I have checked with a test system and it all appears to be the same but on
> the test system users and not allowed to logon to the server direct as I
> would expect.
>
> Thanks
> Dave
>
>

James,

No I've checked this out. Is there any way to check what security settings
the users are getting when they are logged on to the server?

Thanks
Dave

"James B" <> wrote in message
news:...
> Are any of the groups they belong to in the Domain Admin group?
>
>
> "Dave Taylor" <dt-> wrote in message
> news:...
>> Help,
>>
>> I have got an installation where it appears the domain users have full
>> access to the system. They are able to logon to the server directly and
>> unlock workstations that have been logged by the domain admin.
>>
>> The domain users are members of the following:- LocalSite Distribution
> List;
>> Domain user, and another distribution list.
>>
>> Can anyone give me some advise as to where to look to find out why they
> are
>> able to do this. I have created new users and they too get the same
> rights.
>>
>> I have checked with a test system and it all appears to be the same but
>> on
>> the test system users and not allowed to logon to the server direct as I
>> would expect.
>>
>> Thanks
>> Dave
>>
>>
>
>