|Subject:||Prevent "users" from loggin on to domain controller console|
|Posted by:||Lee in CA (Leein…@discussions.microsoft.com)|
|Date:||Thu, 16 Aug 2007|
I manage a domain with 2 Win Svr 03 DC's that was a originally created on a
Windows NT DC, then migrated to Windows 2K DCs, and now Win Svr 03. I notice
on this domain that a standard "domain user" has priviledges to logon to the
console of the DC's and other servers. I believe by default on a Win 2K or 03
domain users can't do this, unless they have been granted privileges to do
so. I'd like to prevent my users from logging on to the consoles of the DCs
and member severs in the domain. How do I do that?
Sys Admin in CA, USA.