Delegate restart of Domain Controller through Remote Desktop

Giganews Newsgroups
Subject: Delegate restart of Domain Controller through Remote Desktop
Posted by:  Mark Z. (Mar…@discussions.microsoft.com)
Date: Mon, 18 May 2009

I have many W2K3 R2 DCs and I need to delegate a group I greated (DCRestart)
the right to log on to them through Remote Desktop, and allow them to restart
DCs.
I created a GPO that gives this group "Allow log on through terminal
services", "Force shut down from a remote system", "Shut down the system" in
the Domain Controllers OU, but this is not working.
The user placed in the group gets the message "To log on to this remote
computer, you must be granted the Allow log on through terminal services
right."

Checking "Remote Desktop Users" does in fact show the group on every DC. The
user in the group has their profile set correctly (can log on to all
computers, Terminal services is enabled).

Replies